What port should i let opened on server?

[rowtc2]

.I am experiencing some security problems (login in WHM with root password,but no reports for brute force).I receive reports for port scanning via CFS. I am suspecting is an automated tool used by hackers to scan servers and run an exploit for some ports.

I have a dedicated server with my 2 websites. Simple websites, with php and simple product presentation :some text and images (no chat,mirc,video)

I use FTP to upload my files and Outlook Express.Visitors doesn't upload files.


What ports are mandatory to be opened? I want to let in firewall just a few, the mandatory only.

Allow incoming TCP
Allow outgoing TCP
Allow incoming UDP
Allow outgoingUDP

[Infopro]

CSF is setup to open just the default ports I believe. Here's a list to check against.
WHM default ports