Thank you ColinTaylor and OzarkEdge for answers.
I asked for these, because after DoS attack some guy in ISP support center told me that 389 port should be "closed" in my environment.
I checked my IP on page provided by OzarkEdge and whole ports are in "Stealth" mode so I'm very glad :)...