Assuming for a self-hosted webserver:

1. the webserver only hosts a static html website
1. iptables is used to reject every IP except a few known ones
1. only Port 443 is forwarded and the website requires SSL via client certificates

What kind of dangers remain? (Disregarding security holes in a patch)