I use ipsec as a port filter. =)