enforce port block