Their server seems to have a direct connection to the internet as well. There is no reason to open all of those ports on the firewall (Even if one exists!), so this must be the case. Seems very dodgy to me.