 Chk your kernel
How did you setup the Xen kernel. Looks like you dont have nat support in your kernel. You can check by doing a
# modprobe -l|grep iptable_nat
The default config requires iptables to do the port mapping since zimbra is installed as a non privillaged user and so uses ports > 1024 |