personally i used the default iptables to secure acces. i just added input and forward rules. not even sure which one works lol