[Freeswitch-users] Best way to disable 5060 and 8080

I'm only using FS with TLS, and do not need port 5060 and 5080 - I guess. I can see a lot of "bots" are trying to connect all the time - without luck. Should I disable port 5060 and 5080 so the load do to bots trying to make calls would disappear? And how do I make this best, via firewall or via FS (and how to I do it in FS, if that's the best way)?