What ports are required for pihole to work?

[DL6ER]

@trigger

Based on the fact I forwarded ssh traffic to that pi from the internet. Add that to the default password and you get the most obvious problem.

No wonder then

1. You don't need to firewall everything in your internal network. Also not after such an experience as long as do two things:
   1.1. you don't forward any ports (except when you have a VPN then the port for this one) and by this slam the door for any hacker
   1.2. (I guess that is obvious) you nuke the SD card that was in the Pi and start from scratch as they could have installed whatever they wanted on this machines
2. the required ports are (as you already mentioned): 53 and 80 for INPUT, 53, 80 and 443 for OUTPUT as well as 4711 for IN-/OUTPUT (but only thorough device lo)