shorewall: validate custom ports