Yes, if you are doing firewalling properly. The problm is that most people aren't and are just using their distribution defaults.