Are the new firewall rules only going to block incoming connections from off campus?
Yes the rules will only block incoming TCP connections from the Internet, not from any of our netblocks, Holywell Park or HallNet. We do already have some internal firewalling, particularly between HallNet and the campus network – and for some departments at their request. Therefore it is already the case that you cannot simply run a server in your department and assume everyone has access.