In the secure area
IMAP: 993 “Always Secure Wrapped Port”
SMTP: 587 “Secure if Available (STARTTLS)”
The rest of this is pretty much spot on:
http://www.itd.umich.edu/itcsdocs/s4321/apple.html
P.S. My treo went into an infinite reboot loop the other day – required hard reset and pure rebuild so I needed to re-derive this all while walking around on Washginton, DC streets.