This is a good idea. You listen on some publicly available endpoint that doesn't have access to your internal network, you vet the messages you receive and push

This is a good idea. You listen on some publicly available endpoint that doesn't have access to your internal network, you vet the messages you receive and push it to a message queue. Then your server running on the internal network manages to connect and pull messages from that queue.