i will recommend you two solutions:
You can bind your application to listen on
localhost:9999
rather than*:9999
you can edit your firewall to don't allow traffic for 9999 port and only allow for port 80. for that you can edit iptables by going to /etc/sysconfig/iptables