How can you ensure that external users cannot connect to www.ABC.com using a DirectAccess connection?