what ports needs to be open?

[Futumsh]

You don't need to be able to accept incoming connections at all, but you need to be able to make outgoing tcp connections to ports 80 and 4050-4099.