how can limit access to wcf service

Question

If we wcf service created then how can intranet client should use/consume service and internet client should not consume service?

Or

 

some client should consume and some should not consume/use the WCF service...?