The Access Control setting page looks like below:
You can ban/allow certain IP addresses. You can also ban Email/Username from records in the mailing list.
In case you want the form to be accessible only if it is launched from certain URL(s), you can use the Allow URL setting.