A zero port number for a security group rule is totally legit