Drush download, what port does it use?
For Drush 8.x (the last version compatible with D7), the drush command, drush pm-download, can either use HTTP (wget) or SSH (git@git.drupalcode.org) depending on your --package-handler argument. It defaults to HTTP.