Exactly. I have an SSH port accessible only by my target IP, not by the whole internet.