I havent tried it, but I assume to sync devices the only one you need is the 8080 port. That is the one syncevolution connects to. I would keep that one open with iptables, the other only for localhost connections.