Use iptables.