Did an Nmap scan of the external address utm 9.4 beta2 from a totally different network not connect to external address and got this.
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2016-03-06 06:28 EST
Pre-scan script results:
| broadcast-avahi-dos:
| Discovered hosts:
| xxx.xxx.xxx.xxx
| After NULL UDP avahi packet DoS (CVE-2011-1002).
|_ Hosts are all up (not vulnerable).
Nmap scan report for ipxxx-xxx-xx-xxx.xx.xx.xxxx.xx (xxx.xxx.xxx.xxx)
Host is up (0.00064s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE
113/tcp closed ident
113/tcp closed ident, should this have been drop/stealth
I am new to this :)