For security reasons we should not accept incoming packets per default and instead allow specific services on specific interfaces.