FWIW - this is one of the reasons I'll spin up a VM - something tiny with plenty of bandwidth to run a couple seeders on.  They way you don't have to back off your security any for nodes to connect.  With the seeder, they'll see it first looking for peerinfo, then only contact your client as needed for blocks and mining (at least, that's how it's supposed to work for new clients)