Yes, 5998 and 5999 are for the login server, 9000 for world server, 7000-7100 are for up to 101 zone servers, but the others aren't necessary. I don't know what 6000 and 7779 are for (chat/mail server?), and 9080 is for the http web interface, which you probably don't need.
As rencro has said, be sure that the clients connecting from WAN are set to use the login server at your external IP address (
http://www.whatismyip.com to find out what it is). In other words, be sure their eqhost.txt is configured properly to connect to your login server over the internet.