[Merlin100]

Found my own answer…figured I’d post it should the question come up for someone else…

Turn off allow AFP in ONE Firewall Setting….

Server Admin – Firewall – Services – Edit Settings for: pull down to Any…make sure Apple File Service (AFP) is not checked. Then from the other options in the pull down (IE: 192.168-net & 192.168.1-net & VPN-Net…in my instance) make sure AFP is checked….now no one can have AFP access to my server via the static public IP address, internal and VPN access only is allowed.

[Author]

Posts