Deny access localhost and localnet

Shadowsocks make user get through not only firewall on client side, but also server's firewall.
Since Shadowsocks server is often setted up with other services, such as MySQL. It may increase the risk.

(Though the implement may not be good...)