Which port should I close?
 

I have one question about shorewall, which port should I close?

huh? you should close everythign you're not using.. :confused:

Ya but I like just to go internet update,upgrade and safe files on my linux,which ports should I not use?

you're stopping inbound access, not outbound. if you initiate a connection yourself out to the net, it'll always work. it's things like mail and web servers, which start from the internet side that you'd stop. if you don't serve anything or require and vpn's or remote ssh access, stop the lot.

Firewall

Everything(no firewall)
Web Server
Domain Name server
SSH server
FTP server
Mail server
POP and IMAP Server
Windows Files sharing (SMB)
CUPS server
Echo request (PING)

So which one should I click on to be safe on the internet?

what does clicking one do.. add or remove access? you want to block absolutely everythign i'd assume, as i've said already...