verify ports before tunneling