You should really have a good hardware firewall before you do that. Change ports, change ports for everything you can nothing I run is on the standard port I make sure of that other than 80 and 443 for unbound I would if I could but I like having access to the internet I should have mentioned that with pihole.