Thank you for your detailed and clear answer.
I was too busy to update my other servers to think properly by myself…
So you’re absolutely right, (my) ZeroShell is protected from outside and, so is out of reach of malicious person.
I’ll edit my first message to avoid that people think that ZeroShell is compromised by this security hole.
Next time, i hope i’ll use my brain…