Ok, as we discussed on the phone, we will keep this in controller_common for now, due to the fact that there may be other cases where the port is needed.  We will refactor this in the future to consolidate firewall rules with their associated services.