Shouldn't those ports always be blocked?