which ports to block ?