hopefully the server connected to the wider internet can only receive from the wider internet and not send anything to the wider internet. Otherwise it can just be used as a proxy to the server that’s not connected to the internet.