Which Ports have to be open on a firewall?

Ports between 3300 and 3399 have to be open to connect remote to a SAP-Server. This is in the real world normally protected by some firewall rules. The protocol is TCP and the numbering follows the rule 33NM where NM is equal to the instance number of the system.