I have a standalone Linux server (no network behind it) running Freeswan ipsec and Samba, and client systems connect to it over the Internet. What is the best way to make Samba accessible only via the ipsec0 interface? Thanks.