make allowed ports configurable