Restrict USER access from outside local network: Allow Access by IP address.
or Leave open for access from anywhere.