allow inbound traffic on exposed port