Restricting Access to Proxied TCP Resources