non localhost cnx allowed (protected via shorewall