If you put a proxy in front, and you're careful to only allow inbound connections from the proxy, you should be ok though.