@wallabybob:
The printer works now?
Yes, It works now, I forgot to say it does.
@wallabybob:
@stoffix:
Have I done something stupid now, or is this the "proper" way to do this?
Since you moved packet filtering from the bridge interface to member interfaces (none of which is LAN) the default filtering on the bridge member interfaces would likely be "block everything". Hence to get equivalent behaviour you would need to copy your LAN interface rules to all your bridge member interfaces. The "proper" action is to set the firewall rules to what you really want.
After eyeballing the new rules, I see that this is just what I have done (for ipv4, I don't use ipv6).
@wallabybob:
@stoffix:
I also noted this message in the system logs while changing the system tunable back and forth:
php: /system_advanced_sysctl.php: The command '/sbin/sysctl vfs.forcesync="0"' returned exit code '1', the output was 'sysctl: oid 'vfs.forcesync' is read only'
Some sysctls can be changed only at boot time. I suspect this is one of those. This sort of thing can make the system log a bit ugly but I don't think there is an easy fix except perhaps don't set any sysctls to their present value.
Ok, that kind of explains it. I didn't change that sysctl, but I guess all sysctls gets updated when I apply changes, even just to one sysctl.