better calling out of default ports, user, and allowed IPs