Currently, configuration recommendations for ports that firewalls should pass are in rst_source/krb_admins/appl_servers.rst, which seems to be an odd place for them. They should be easier to find. Maybe there should be a network configuration section.