Protected game port (net_port): 27016 (needs to be NAT'ed out, also - use this port when direct-connecting (won't work if server is password protected))
Query port (net_masterServerPort): 27017 (you need to NAT this one out in order to make your server visible online