Firewall: allowing control over permitted source host