Networker 7.3.2 Storage Node through firewall

I have a storage node and I'm trying to lock down the firewall rules so I don't have to allow all traffic from a certain IP through to the storage node.

I've read Appendix B, and I've attached the pertinent paragraph of the manual below.

I can do the math (4+2 * 3 + 1) = 7 ports. I know I can use nsrports to narrow down my range of ports, but I don't know what ports to open.

Generally I open 7937 & 7938 tcp/udp on the clients, and have done so for the Storage Node. I assume that's the first 4 ports mentioned.

I know some ports are service ports, and some are connection ports, but don't know how many to assign and where to assign them.

Can anybody point me to more specific documentation or let me know what ports need to be opened, and not the number of ports?

thanks
--
steve

---
The only storage node daemons that are run are:
◆ nsrexecd
◆ nsrmmd
◆ nsrlcpd
As described previously, nsrexecd uses four ports, nsrmmd uses two ports per device, and
nsrlcpd uses one port per jukebox. From this, the number of ports required by a NetWorker
storage node is:
4 + 2 * #devices + #jukeboxes
Where:
◆ #devices is the number of devices configured on the NetWorker storage node only
◆ #jukeboxes is the number of jukeboxes configured on the NetWorker storage node only
---