Firewall and FreeBSD ports

[John Almberg]

I just set up a new server with a very restricted PF configuration.  
One problem: I can no longer install software with ports (i.e, the / 
usr/ports collection.) I have to disable PF to do so. Obviously not a  
great solution.

Am I correct in guessing that ports uses FTP to grab source files  
from mirrors? I'm trying to figure out the smallest number of ports  
(the TCP/IP kind) that I need to open in my firewall. I don't want to  
enable incoming FTP requests, but do want to allow outgoing ftp  
requests, I believe.

Am I on the right track, here?

Thanks: John