My goal was to check how those ports responded to an external scan, and to make sure the network boundary was not open to casual scanning or potential ingress through those addresses. This recipe ...