A quick search suggests the standard ports used by MQTT are 1883 for unencrypted comms and 8883 for encrypted comms, but if you block those ports entirely you may find that some devices stop working correctly.