1) it only makes sense for SSH, as other ports are expected to be exposed to the external network (e.g 80 - Horizon, 8775 - Nova, etc)
2) even for SSH I'd *not* call it a "security vulnerability" - it's perfectly fine for SSH to be exposed to the external network (it's the way you access your instances in public clouds, FWIW), though, I agree that *may* be unexpected and/or undesirable.
Still, as far as we have public key authentication set in place, I'm not sure this should be private and get importance more than Wishlist.
Daniil, I tweaked the description a bit:
1) it only makes sense for SSH, as other ports are expected to be exposed to the external network (e.g 80 - Horizon, 8775 - Nova, etc)
2) even for SSH I'd *not* call it a "security vulnerability" - it's perfectly fine for SSH to be exposed to the external network (it's the way you access your instances in public clouds, FWIW), though, I agree that *may* be unexpected and/or undesirable.
Still, as far as we have public key authentication set in place, I'm not sure this should be private and get importance more than Wishlist.