Unable to close ports 2000 (cisco SCCP) and 5060 (SIP) on WAN interface

Question

After i did my initial install i did a portscan on the XF firewall. 
 The ports 2000 and 5060 tcp are open on the WAN interface and i don't want this. 
 i already unloaded all the system modules in CLI (except DNS) but they are still open. 
 Does anybody know how to close these ports. 
 
 gr. Sjoerd

Sjo Cha · Accepted Answer

I'm sorry i made mistake in the test setup. 
 the ports came back as open because the sip helper function on de passing router were enabled. 
 after testing it in an switch setup only the right ports were open in the scan, ports 2000 and are 5060 are closed. 
 gr. sjoerd