well, i removed the two extra, followed your instructions, and now i again have three entries, one that lists the program, one that lists the tcp port and one that lists the udp port. guess that's just the way mine works.
i tried the dnsalias test site and it shows my tcp port closed... it was working a couple of months ago. not sure what has changed...