Add extended inbound-port spec

Allows specification of protocol and port ranges.