portmapper

Hello, I using a 3 Node Proxmox 4.1 Cluster with PVE-Firewall. The BSI Team makes a Pentest on my Server and have reported, that rpcbind and squid-http port is open. So i think ok, and add rules to drop the ports 111 and 3128 tcp/udp. But the Firewall doesn't block the Ports (other Settings...