IP printers through a firewall

We have a third-party vendor that needs to be able to sign on to our 
AS/400 and print reports. While the list archives made it easy to find out 
which ports Client Access needs to operate through the firewall, I'm not 
sure which IP ports printing uses. 

When I do an NETSTAT *CNN, I recognize the remote ports for the various 
print servers, but the local ports seem to be all over the place. What 
ports will the firewall administrators need to keep open?

Also any general advice about both allowing and securing such access would 
be much appreciated.

Thank you, 
Pam Phillips
Sr. AS/400 Systems Analyst
Abbott Laboratories
MediSense Products
4A Crosby Drive
Bedford MA 01730
pam@xxxxxxxxxxxxx
781-276-6144
Fax: 781-687-5246