Support port based forwarding/excluding.

Note: *Untested with ipfw.*