No, there is no firewall. However if your server listens on localhost ("set address ..." line of your etc/config.tcl), you can access it only from localhost.