alternatively, you can set it up using iptables, but who wants to actually mess with those