We have done this in the past by setting up a *BSD or Linux box with two NIC's that are not routable, then use port forwarding on port 515 for lpr/lpd on both NIC's.
from your client box use the IP address of the new box as the ip address of the printer. when a job is sent to the new box it will be forwarded to the printer.
secure, safe, and cheap.