But, what to do about internal servers running things which we are port forwarding to the outside world?