Hi
Apply recommendation from note 186119 - Restricting DB access to specific hosts
and set parameters
tcp.validnode_checking= yes
tcp.invited_nodes = (IP Adress1, IP Adress2, ...)
in the listener configuration file ($ORACLE_HOME/network/admin/protocol.ora)
There are to my knowledge no SAP recommendation that forbids changing the listener default port.
Regards