External Access

These are ports typically available to mail clients.

25
smtp [mta] - incoming mail to postfix
80
http [mailbox] - web mail client
110
pop3 [mailbox]
143
imap [mailbox]
443
https [mailbox] - web mail client over ssl
465
smtps [mta] - incoming mail to postfix over ssl (Legacy Outlook only? If possible, use 587 instead)
587
smtp [mta] - Mail submission over tls
993
imaps [mailbox] - imap over ssl
995
pops [mailbox] - pop over ssl
9071
https [nginx => mailbox] - proxy admin console (if enabled)

Internal Access
These are ports typically only used by the zimbra system itself.
389
ldap [ldap]
636
ldaps [ldaps] - if enabled
7025
lmtp [mailbox] - local mail delivery
7047
http [conversion server]
7071
https [mailbox] - admin console
7072
http [mailbox] - ZCS Nginx Lookup (backend http service for nginx lookup/authentication)
7110
pop3 [mailbox] - Backend POP3 (if proxy configured)
7143
imap [mailbox] - Backend IMAP (if proxy configured)
7306

mysql [mailbox]
7307
mysql [logger] - logger (removed: ZCS 7)
7780
http [mailbox] - spell check
7993
imaps [mailbox] - Backend IMAP SSL (if proxy configured)
7995
pop3s [mailbox] - Backend POP3 SSL (if proxy configured)
8080
http [mailbox] - Backend HTTP (if proxy configured on same host)
8443
https [mailbox] - Backend HTTPS (if proxy configured on same host)
10024
smtp [mta] - to amavis from postfix
10025
smtp [mta] - back to postfix from amavis
11211
memcached [proxy] - nginx route lookups

System Access
22
ssh
53
dns
514
syslogd [logger] (udp)

tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp
tcp6
tcp6
tcp6
tcp6
tcp6

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

0 0.0.0.0:25
0.0.0.0:*
LISTEN
3255/master
0 0.0.0.0:443
0.0.0.0:*
LISTEN
1983/java
0 0.0.0.0:7071
0.0.0.0:*
LISTEN
1983/java
0 127.0.0.1:23232
0.0.0.0:*
LISTEN
2452/perl
0 0.0.0.0:7072
0.0.0.0:*
LISTEN
1983/java
0 127.0.0.1:23233
0.0.0.0:*
LISTEN
2454/perl
0 0.0.0.0:993
0.0.0.0:*
LISTEN
1983/java
0 0.0.0.0:995
0.0.0.0:*
LISTEN
1983/java
0 127.0.0.1:7171
0.0.0.0:*
LISTEN
1061/java
0 172.16.2.252:389
0.0.0.0:*
LISTEN
1031/slapd
0 127.0.0.1:10663
0.0.0.0:*
LISTEN
1901/zmlogger: zmrr
0 127.0.0.1:10024
0.0.0.0:*
LISTEN
2506/amavisd (maste
0 127.0.0.1:10025
0.0.0.0:*
LISTEN
3255/master
0 127.0.0.1:10026
0.0.0.0:*
LISTEN
2506/amavisd (maste
0 127.0.0.1:7306
0.0.0.0:*
LISTEN
1889/mysqld
0 127.0.0.1:10027
0.0.0.0:*
LISTEN
3255/master
0 0.0.0.0:587
0.0.0.0:*
LISTEN
3255/master
0 127.0.0.1:10028
0.0.0.0:*
LISTEN
3255/master
0 127.0.0.1:10029
0.0.0.0:*
LISTEN
3255/master
0 127.0.0.1:10030
0.0.0.0:*
LISTEN
3255/master
0 127.0.0.1:3310
0.0.0.0:*
LISTEN
2979/clamd
0 0.0.0.0:110
0.0.0.0:*
LISTEN
1983/java
0 0.0.0.0:143
0.0.0.0:*
LISTEN
1983/java
0 127.0.0.1:10032
0.0.0.0:*
LISTEN
2506/amavisd (maste
0 127.0.0.1:80
0.0.0.0:*
LISTEN
1983/java
0 0.0.0.0:465
0.0.0.0:*
LISTEN
3255/master
0 127.0.0.1:8465
0.0.0.0:*
LISTEN
3004/opendkim
0 0.0.0.0:7025
0.0.0.0:*
LISTEN
1983/java
0 0.0.0.0:22
0.0.0.0:*
LISTEN
772/sshd
0 :::7780
:::*
LISTEN
3031/httpd
0 ::1:10024
:::*
LISTEN
2506/amavisd (maste
0 ::1:10026
:::*
LISTEN
2506/amavisd (maste
0 ::1:10032
:::*
LISTEN
2506/amavisd (maste
0 :::22
:::*
LISTEN
772/sshd