Being a pentester I'm a bit paranoid and I really like the idea of exposing as few ports/services as possible