when can custom script return a port for a blocked app？

[GoogleCodeExporter]

i wish i can allow root(APP ID 0) access port 443 as an exception when i have 
blocked it in app list. but custom script now is working on iptables, so i can 
only open port 443 for every applications or open whole root group permission 
in app list.

Original issue reported on code.google.com by [email protected] on 25 May 2014 at 4:05