On two machines with different public ip I host two hidden services. Both hidden services are wordpress blogs. Both services can be accessed by their respective .onion addresses with a tor-browser. Funnily enough I can browse to one service with firefox using the public ip address of its machine. I get as far as the intro page, the subsequent pages do not work because firefox would not enumerate the onion addresses. But even so having the first page of the wordpress site visible by its ip from clearnet seems to me to pose a security risk regarding anonymity. So what have I to do to stop the access from clearnet?