maybe it is possible to build some kind of firewall setting page to setup restrictions for each service using iptables.