Dedicated servers can configure external firewalls too; there's a tab for it on the server config. It's basic but functional.