&def_service(ttrss, ttrss, tcp, 9000); &allow_service_for(ttrss, web); &allow_service_for(postgres, ttrss); &allow_service_for(ldap, ttrss);