One-liner to expose a localhost-only port (especially for WSL2).

netsh interface portproxy add v4tov4 listenport=4000 listenaddress=0.0.0.0 connectport=4000 connectaddress=localhost