If all your servers are configured correctly, and your using the latest versions of apache/qmail/whatever_news_server then it should be pretty tight, *unless* your iptables script leaves something to...