Your web service is available to anyone that can access your IP address or DNS name. If you want to expose a machine to expect web service requests from locations outside your domain you would need to discuss the implementation and security of that with your IT department.
