diff --git a/bin/OpenSim.ini.example b/bin/OpenSim.ini.example
index 7db75063a8..33b2819914 100644
--- a/bin/OpenSim.ini.example
+++ b/bin/OpenSim.ini.example
@@ -55,9 +55,16 @@
     ;# {BaseURL} {} {BaseURL} {"http://${Const|BaseHostname}} "http://${Const|BaseHostname}"
     BaseURL = http://${Const|BaseHostname}
 
+    ; If you run a grid, several services should not be availble to world, access to them should be blocked on firewall
+    ; PrivatePort should closed at the firewall.
+
     ;# {PublicPort} {} {PublicPort} {8002 9000} "8002"
     PublicPort = "8002"
 
+    ; you can also have them on a diferent url / IP
+    ;# {PrivURL} {} {PrivURL} {"http://${Const|BaseURL}} "${Const|BaseURL}"
+    PrivURL = ${Const|BaseURL}
+
     ;grid default private port 8003, not used in standalone
     ;# {PrivatePort} {} {PrivatePort} {8003} "8003"
     ; port to access private grid services.
diff --git a/bin/config-include/GridCommon.ini.example b/bin/config-include/GridCommon.ini.example
index 4b1914b50a..46b4dede9b 100644
--- a/bin/config-include/GridCommon.ini.example
+++ b/bin/config-include/GridCommon.ini.example
@@ -76,13 +76,13 @@
     ;
     ; Change this to your grid-wide asset server.  Do not add a slash to the end of any of these addresses.
     ;
-    AssetServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    AssetServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [InventoryService]
     ;
     ; Change this to your grid-wide inventory server
     ;
-    InventoryServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    InventoryServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
     ;MaxRetries = 0
 
 [GridInfo]
@@ -95,7 +95,7 @@
     ;
     ; Change this to your grid-wide grid server
     ;
-    GridServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    GridServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
     ;AllowHypergridMapSearch = true
 
     ;; Directory for map tile images of linked regions
@@ -115,7 +115,7 @@
     ;LocalServiceModule = "OpenSim.Services.Connectors.dll:EstateDataRemoteConnector"
 
 [EstateService]
-    EstateServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    EstateServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [Messaging]
     ; === HG ONLY ===
@@ -128,43 +128,43 @@
     ;
     ; Change this to your grid-wide grid server
     ;
-    AvatarServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    AvatarServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [AgentPreferencesService]
     ;
     ; Change this to your grid-wide avatar prefs server
     ;
-    AgentPreferencesServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    AgentPreferencesServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [PresenceService]
     ;
     ; Change this to your grid-wide presence server
     ;
-    PresenceServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    PresenceServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [UserAccountService]
     ;
     ; Change this to your grid-wide user accounts server
     ;
-    UserAccountServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    UserAccountServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [GridUserService]
     ;
     ; Change this to your grid-wide user accounts server
     ;
-    GridUserServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    GridUserServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [AuthenticationService]
     ;
     ; Change this to your grid-wide authentication server
     ;
-    AuthenticationServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    AuthenticationServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [FriendsService]
     ;
     ; Change this to your grid-wide friends server
     ;
-    FriendsServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    FriendsServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [HGInventoryAccessModule]
     ;
@@ -223,7 +223,7 @@
     UserAgentServerURI = "${Const|BaseURL}:${Const|PublicPort}"
 
 [MapImageService]
-    MapImageServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    MapImageServerURI = "${Const|PrivURL}:${Const|PrivatePort}"
 
 [AuthorizationService]
   ; If you have regions with access restrictions
@@ -244,4 +244,4 @@
     ;; SimulatorCapability = "00000000-0000-0000-0000-000000000000"
 
 [MuteListService]
-    MuteListServerURI = "${Const|BaseURL}:${Const|PrivatePort}"
+    MuteListServerURI = "${Const|PrivURL}:${Const|PrivatePort}"