I have a 2611XM connected directly to the internet with a small PC network on the other side of the router. I would like to put an ACL on the public interface to block viruses and hackers.

I am looking for a list of commonly blocked ports. Is there a best practice I can refer to? I'm not trying trying to completely lock the router down but rather limit the massive amount of garbage that hits my public interface. Thanks.