Default Ports Used by Zimbra

You may choose not to allow remote connections to all of these. In a multi-node environment, all nodes will need access to the ldap server or servers (389) and to the logger server (514), mta nodes will need access to lmtp on all mailbox nodes (7025), mailbox nodes will need admin port access to other mailbox nodes (7071).

=========================================================================
External Access:
These are ports typically available to mail clients.

25    smtp [mta] - incoming mail to postfix
80    http [mailbox] - web mail client
110    pop3 [mailbox]
143    imap [mailbox]
443    https [mailbox] - web mail client over ssl
465    smtps [mta] - incoming mail to postfix over ssl (Outlook only)
587    smtp [mta] - Mail submission over tls
993    imaps [mailbox] - imap over ssl
995    pops [mailbox] - pop over ssl
7071    https [mailbox] - admin console

=========================================================================

Internal Access:
These are ports typically only used by the zimbra system itself.

389    ldap [ldap]
636    ldaps [ldaps, if enabled]
7025    lmtp [mailbox] - local mail delivery
7047    conversion server
7306    mysql [mailbox]
7307    mysql [logger] - logger
7780    http [mailbox] - spell check
10024    smtp [mta] - to amavis from postfix
10025    smtp [mta] - back to postfix from amavis

=========================================================================

System Access:

22    ssh
514    syslogd [logger] (udp)

=========================================================================


A complete list of Ports with related Services:

Port     ZCS Service
-------------------
25     Postfix
80     HTTP
110     POP3
143     IMAP
389     LDAP
443     HTTPS
465     SMTP SSL (since ZCS 4.5.5)
993     IMAP SSL
995     POP3 SSL
5222     XMPP client connection
5223     XMPP client connection over SSL
5269     XMPP server connection
7025     LMTP
7047     Conversion Server
7071     ZCS Admin services connector (SSL)
7072     ZCS Extension port (http backend service for nginx lookup/authentication)
7110     Backend POP3 (if proxy configured)
7143     Backend IMAP (if proxy configured)
7306     MySQL
7307     Logger MySQL
7335     XMPP intra-cloud routing listener
7777     XMPP Proxy Service
7993     Backend IMAP SSL (if proxy configured) (not used with nginx since 5.0?)
7995     Backend POP3 SSL (if proxy configured) (not used with nginx since 5.0?)
10015     XMPP external component listener
10024     amavisd-new
10025     Postfix answering amavisd-new


################################################################################

Ref:

http://heerakoranga.blogspot.com/p/zimbra-tips.html