The easy way is to set-up a router and configure it. On the router you have firewall that restrict the outside acces.
If you don't have one or the money to buy it you can install a proxy server on your computer or the server (I don't know how you have the lan), and norton antivirus which has a firewall too. on the proxy you can configure which IP addresses to have acces.