These are locked to prevent spam, and spoofing of the domain name, as well as DNS amplification attacks.
Can I use port forwarding from my router in the SHS network?
All ports for members are by default, except SMTP (port 25) and DNS (port 53).