AIM and ICQ servers listen on every port. So, if a single port is open on the firewall, AIM and ICQ can work. I've commonly had my AIM and ICQ accounts set to some port like 21-23, or others that are open on my work firewall.