Configure Debian iptables firewall. Allow everything out, limit in, disable forward.