Stream: access module.

stream {
    server {
        ...
        allow 127.0.0.1;
        deny all;
    }
}