Welcome, if you would like to post a comment please register.
We also encourage you to explore all things Zimbra with our team and members of the community.
I would lock down SSH to restricted IPs and block ldap access as well to only allowed IPs. The other ports seems ok, but like any firewall rules, block it all and enable what you need.