NetInstall vs. Firewall – What ports?

I've been trying to figure out what ports need to be open in order for netboot/netinstall to work. Currently, if I have 10.6 server firewall turned on, I can't netinstall at all. It just hangs. If I turn off the firewall, everything is fine. Any pointers for this issue?