technically yeah you could get DDoS'ed, but that's true with the current setup too. It's already listening on the public interface.