Can you get away without exposing it to the internet? Firewall it off altogether, or just open the address of a specific machine that needs access to it?