I have an open SSH tunnel, but I already know that. Has to be that way to retain connectivity remotely. I also have one open port, which I did intentionally to enhance gameplay for Starcraft2. Not sure if it was necessary though.......
Other than that, I'm 100%