portfwd validation was sometimes not picking up a blank source port