I have found a few systems in the wild with static public IP on the wan port. It works. But these folks were hacked DAILY. I put in VPN routers to fix it.