[USR-TC] filter to prevent denial of service attacks

hello, We are new to the Total Controls and have been using Portmasters. We have been searching the manuals, the Internet and the maillist archives (through google searches) but have not found the answers for some questions. On our portmasters, we can set up firewall scripts/filters to block denial of service attacks by blocking ip traffic directly to the ip address of the portmaster on its ethernet port except for our local network, dns, and radius servers external to us. Is there a way to do this on the Total control? If so, what exactly do we need to do to implement it? Thank you