when can custom script return a port for a blocked app？

```
i wish i can allow root(APP ID 0) access port 443 as an exception when i have 
blocked it in app list. but custom script now is working on iptables, so i can 
only open port 443 for every applications or open whole root group permission 
in app list.
```

Original issue reported on code.google.com by `publicbo...@gmail.com` on 25 May 2014 at 4:05
