Restrict host_ip for forwarded port