A firewall at the beginning is enough for you.