listen on any to ease testing (secure this apart)

A good idea would be listening on 0.0.0.0 only in development...

In the meanwhilem use, well, a firewall and/or a VPN ;)