ECE Networking Port Requirements Update (#881)

Move note on Zookeeper ports from side note to be included in the table
of ports.

Author: mmahacek

deploy-manage/deploy/cloud-enterprise/ece-networking-prereq.md

@@ -23,6 +23,8 @@ When there are multiple hosts for each role, the inbound networking and ports ca
 
 ![ECE networking and ports](/deploy-manage/images/cloud-enterprise-ece-networking-ports.png "")
 
+**Inbound traffic from any source**
+
 | **Number** | **Host role** | **Inbound ports** | *Purpose* |
 | --- | --- | --- | --- |
 |  | All | 22 | Installation and troubleshooting SSH access only (TCP)<br> |
@@ -32,11 +34,12 @@ When there are multiple hosts for each role, the inbound networking and ports ca
 | 3 | Proxy | 9400, 9443 | Elasticsearch Cross Cluster Search and Cross Cluster Replication with TLS authentication (9400) or API key authentication (9443), also required by load balancers. Can be blocked if [CCR/CCS](../../remote-clusters/ece-enable-ccs.md) is not used.<br> |
 | 7 | Coordinator | 12400/12443 | Cloud UI console to API  (HTTP/HTTPS)<br> |
 
-In addition to the following list, you should open 12898-12908 and 13898-13908 on the director host for ZooKeeper leader and election activity.
+**Inbound traffic from other ECE hosts**
 
 | **Number** | **Host role** | **Inbound ports** | *Purpose* |
 | --- | --- | --- | --- |
 | 1 | Director | 2112 | ZooKeeper ensemble discovery/joining (TCP)<br> |
+| 1 | Director | 12898-12908, 13898-13908 | ZooKeeper leader and election activity |
 | 4 | Director | 12191-12201 | Client forwarder to ZooKeeper, one port per director (TLS tunnels)<br> |
 | 5 | Allocator | 19000-19999 | Elasticsearch node to node and Proxy to Elasticsearch for CCR/CCS (Node Transport 6.x+/TLS 6.x+)<br> |
 | 7 | Coordinator | 22191-22195 | Connections to initial coordinator from allocators and proxies, one port per coordinator, up to five (TCP)<br> |