--- /etc/cups/cupsd.conf.ori	2012-02-02 16:57:34.000000000 +0100
+++ /etc/cups/cupsd.conf	2012-02-02 17:16:19.000000000 +0100
@@ -14,13 +14,18 @@
 
 
 # Only listen for connections from the local machine.
-Listen localhost:631
+Listen 127.0.0.1:631
 Listen /var/run/cups/cups.sock
 
 # Show shared printers on the local network.
-Browsing On
+#
+# Turning on Browsing enables cupsd to liste on UDP:*.631 which is insecure.
+# You can print on your printers with Browsing turned off (default).
+# Check with 'netstat -l' to see opened IPP ports.
+Browsing Off
 BrowseOrder allow,deny
-BrowseAllow all
+# BrowseAllow all
+BrowseAllow from 192.168.0.0/24
 BrowseLocalProtocols CUPS
 
 # Default authentication type, when authentication is required...