Restricting TCP/IP connections

I’ve got a W2K server that is not running AD, just providing shared folders. I want to be able to restrict incoming TCP/IP connections *of any kind* to specific IP addresses. How? Any help is much appreciated.