how to allow root telnet only within local ethernet

[Robert Schelander]

Does anyone know how to configure the system that root can
only telnet from local ethernet and not via the ham interfaces.
It should still be possible for any ham to use telnet with his
username.

Thanks
Robert