allow 8080/tcp inbound access for satellite guests