Block specific TCP/UDP ports

[Shotgun]

How can one block specific TCP/UPD ports from an unattended install?

I know that you can modify SERVICES.INF to 'kill' some ports (by specifying a 0).

Also, I would like to know the ports to block (and how to do it from an unattended setup) for:

• MSN Messenger
  
• Yahoo Pager
  
• ICQ
  
• MS Chat
  
• Chat tru webpage (Java?)
  
• Kazaa
  

Is it possible to restrict the ports that can be opened a specific range?

The point being to know if this type of control is available from within the OS, and if it can be implemented from an unattended CD.