Locking down ARC to one external ip

You wish to review this thread, among others.