What are the ports required to be opened on a firewall to allow access to the MAA ?