which ports to open

[isener]

Hello,
about ports:

I disabled firewalld (systemctl disable firewalld) and I use CSF (Config Server Firewall)

which ports I have to open
now my csf.conf is like this:


Allow incoming TCP ports
TCP_IN = "22,80,443,993,1194,5555,992,8080,5228,5938,40000:65000"

# Allow outgoing TCP ports
TCP_OUT = "22,80,443,993,1194,5555,992,8080,5228,40000:65000"


# Allow incoming UDP ports
UDP_IN = "53,67,68,123,500, 4500,1701,40000:65000"

# Allow outgoing UDP ports
# To allow outgoing traceroute add 33434:33523 to this list
UDP_OUT = "53,67,68,123,500, 4500,1701,40000:65000"

but every time i get error 13, than when I look at:
/usr/local/vpnserver/server_log/vpn_20220421.log
I see that a new port is blocked, so I have to add this yo my cnfig file to open.

is better to work with linux iptables ?
How to configure in iptables with all the forward rules etc

[eddiewu]

Firewall should only block certain incoming ports. What is the point blocking outgoing ports?