fix(contrib/ec2): be more restrictive with ports