Disable Print Server Capabilities
To prevent remote users from potentially connecting to and using
locally configured printers, disable the CUPS print server sharing
capabilities. To do so, limit how the server will listen for print jobs by
removing the more generic port directive from /etc/cups/cupsd.conf:
'Port 631'
and replacing it with the 'Listen' directive:
'Listen localhost:631'
This will ...