pgetsos

I also use Zerotier for such cases. Not sure if you can somehow limit the ports they see, but works great in general