worrying port scan

A portscan from an external Internet box onto my webserver gives: PORT STATE SERVICE 21/tcp filtered ftp 22/tcp filtered ssh 23/tcp open telnet 80/tcp open http 254/tcp open unknown 255/tcp open unknown 556/tcp filtered remotefs The only open port on the SuSEfirewall2 script is port 80. I don't want ftp nor telnet. There is no mention of them in the script and I also double checked with yast. What does 'filtered' mean? Can anyone help? SuSE 10.0 Thanks, Steve.