portfw more flexible