The following ports need to be open in your firewall start and run GECAMed from the JBoss server:
1098 jboss:service=Naming
1099 jboss:service=Naming
3873 jboss.remoting:type=Connector,name=DefaultEjb3Connector,handler=ejb3
4444 jboss:service=invoker,type=jrmp
8080 jboss.web:service=WebServer?
8093 jboss.mq:service=InvocationLayer?,type=UIL2