I also thought about exception but that should be on a lower level - in Firewall