What port do I need to open between mobility (DMZ) and my MTA (internal) in order to create the needed trusted app key?

Is it 4500? Or whatever the MTA port normal uses to route mail? (in our case, 7100)

Thanks,

-Evan