Look, if you're serious about this, set up a proper DMZ. Segment your network, throw in some DNS magic with internal and external zones, and slap a reverse prox

Look, if you're serious about this, set up a proper DMZ. Segment your network, throw in some DNS magic with internal and external zones, and slap a reverse proxy in there for good measure. That way, you can have your cake and eat it too - internal and external access without compromising security.