as for the having a permission per port, its perfectly doable