I did some search around but didn't find a "comprehensive" list of which port should be left open in a standard installation of CPanel used ONLY as a mail server/webmail.
So to have WHM/CPanel/Webmail access, SMTP/POP3/IMAP (with SSL and not) and eventually ports for updates like SpamAssassin update, CPanel update, BIND for caching Blocklists, whatever other update is there.
So to have WHM/CPanel/Webmail access, SMTP/POP3/IMAP (with SSL and not) and eventually ports for updates like SpamAssassin update, CPanel update, BIND for caching Blocklists, whatever other update is there.