Allow shorewall to accept connections from host A to port B