If you looking for specific ports to block in the firewall then you will probably want to block all incoming connections on ports below 1024. You should allow outgoing connections on these ports so you can connect to http (port 80), ssh (22), smtp (25), etc. HTH Eric