fix port
restrict file lookup