allow incoming TCP traffic on specific port