MG ports are only for the Web Tier (that resides in the same container) to communicate with mgserver. Tomcat port is only so that Apache (also in the same container) can talk to it. Only the httpd one (8008) needs to be visible to the outside world.