I'd like to expose a machine running Windows Server 2012 to the internet. I plan to run a single application that uses a specific port (say 12345) and then use RDP through 3389 to logon and manage it. I would use the firewall to block access to all but these two ports.
Assuming the single application itself is secure, I'd like to know whether there are aspects of security I need to consider, and if so, what they are.
Update 9/26/16 Sorry I didn't respond sooner; one of my email filters marked your reply as read. Thanks for replying.
I plan to rent a server, or virtual server, from someone like 1&1. Based on your response I guess I'd rent two and use one as a router. Maybe all of their servers sit behind a router - I'll have to ask.
I've noted your bulleted suggestions and they all make sense. I'll look into smart CDN services.
I think I understand the matter of dealing with DDOS attacks on the open ports but I'm not quite clear about how the machine is vulnerable if I've blocked all ports except for the application and RDP. Could you expand on this a little?