You will need to allow guest calls and enable anonymous calls on 1.2.3.4 , whose inbound context will need to encompass all your queues and extensions (maybe from-internal) from those calls.
(that is probably the easiest route through which anybody will ever get scammed though)