There are techniques allowing you to leave firewall ports open, or for opening up ports from outside, whilst retaining security.