samba - Aug 2003 - How to restrict samba access to ipsec?

I have a standalone Linux server (no network behind it) running Freeswan
ipsec and Samba, and client systems connect to it over the Internet. What is
the best way to make Samba accessible only via the ipsec0 interface?

Thanks.