How can I make sure there are no vulnerable ports?

I want to make sure that if somebody was to find my ip address they were not able to port scan me and access my computer. Just want to be sure because I get lots of BLOCK messages on startup on ports. thanks