It isn't necessary to be directly connected to the internet to get exploited. Of course your router will only forward traffic to port 80 as you configured, but today the most succesfull way to get infected, is to visit other websites on your own. Most browsers - even those considered as safe - have security holes. Click on the wrong google-link, visit a warez- or porn-site and you'll get infected.