I know this is kinda stupid, but doing: sudo ufw allow Samba basically says anyone can access the samba ports on my server. maybe it's pointless (as if someone's hacked my network they'd have an internal IP anyway), but I'd like to allow the ports defined in certain preconfigured applications to only be accessible from my internal network IPs (192.168.0.0/24). Is there any way to do this besides: