No, I think you’re misunderstanding the problem. Virtualmin (Webmin) listens on all addresses by default. There’s probably a firewall blocking access, but not the local firewall on the system itself (unless the firewall on the system itself has some additional configuration beyond what Virtualmin sets up…the Virtualmin install just opens the ports it needs, it doesn’t try to figure out how to block anything).