cups question

[Brian Densmore]

Yesterday, I opened up my cups server to allow local only
browsing. So now my primary printer is shared across my LAN.
I do have one concern. I don't necessarily want to deny access
to my firewall pc, but is it possible for my LAN to be attacked 
from without if I don't deny the inside of the firewall access to
the printer? This is of course assuming the firewall PC doesn't
get compromised, because obviously the entire LAN is wide open
if that happens. 

Thanks,
Brian