A server is a building full of numbered doors. Some doors need to be open for business; some are how attackers get in. You decide which is which.
Judge packets one at a time. Learn which ports carry what.
Read the brief, set the rules, release the traffic wave.
Users are complaining. Find the faulty rule and fix it.