That is correct. When I configured the webserver I had to allow external connections also.
I assume not everyone has all services enabled at al time, and opening ports on the firewall could pose a security risk.
Guess that's why it needs manual configuration.
Cheers.