expose private ports only