Whatever port's you have configured for your Logonserver and Worldserver. So for instance if it's an Ascent derivative you'd unblock the defaults of 3724/tcp and 8129/tcp.