All of this ports are declared by Avast (except 3389). And I want to exclude them.
For example, When I knocking by telnet on port 25 I have that answer:
"... concurrent connection limit in Avast exceeded ..."
And its ports are really closed in my infrastructure