sounds like an update has restarted an old mta. do
lsof -i 25
or
ps -ef |grep postfix
ps -ef |grep exim
while zimbra is shut down, to see what is running. rather than shutting down an existing mta, remove it, or at least disable it in runlevels. this way it won't start up again randomly. |