[mekster]

It does by not exposing the ports that aren't meant to be and only routing the traffic intended down to the local network.