Unless you really need it, I suggest that you get rid of the portmap and rpc.whatever services.

For reference, my webserver:

Active Internet connections (servers and established)

Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   

tcp        0      0 peculiar.differentp:ssh ellided.ellided.c:61464 ESTABLISHED 15547/sshd          

tcp        0      0 *:www                   *:*                     LISTEN      19519/apache        

tcp        0      0 *:ssh                   *:*                     LISTEN      15739/sshd          

tcp        0      0 *:pop3                  *:*                     LISTEN      14287/tcpserver     

tcp        0      0 *:smtp                  *:*                     LISTEN      14282/tcpserver     

tcp        0      0 *:ftp                   *:*                     LISTEN      197/proftpd (accept 

tcp        0      0 *:auth                  *:*                     LISTEN      154/inetd           

tcp        0      0 peculiar.differe:domain *:*                     LISTEN      132/named           

tcp        0      0 localhost:domain        *:*                     LISTEN      132/named           

udp        0      0 *:1024                  *:*                                 132/named           

udp        0      0 peculiar.differe:domain *:*                                 132/named           

udp        0      0 localhost:domain        *:*                                 132/named