Default TCP_IN: 20, 21, 22, 25, 26, 53, 80, 110, 143, 443, 465, 587, 993, 995, 2082, 2083, 2086, 2087, 2095, 2096. UDP_IN: 53.
If SSH is not on 22, add the real port to TCP_IN in /etc/lsf/lsf.conf before Enable. Passive FTP needs the range from WHM → FTP Configuration in TCP_IN (e.g. 40000:50000). Then Firewall → Restart.
