allow VPN (pp2p) through firewall