Adding a firewall into ESOS has been on the unofficial to-do list for
a while now, but I don't see that happening any time in the very near
future (certainly not in a stable release).
What about adding a security appliance device (eg, firewall)
in-between the WAN connection and your ESOS machine?
--Marc