Firewall: add range port