Hi,
if you want to connect to a JBoss behind a firewall, and you can only connect via ssh to the JBoss server, you should forward the following ports. They are at least sufficient for Naming, Remote EJB calls and web:
You also need to add these system properties in your JBoss start script:
-Djava.rmi.server.hostname=localhost -Djava.rmi.server.useLocalHostname=false
This works at least for a JBoss 4.2.2. If you need other ports for other services, feel free to add them here in this thread.
I've opened this thread, because I've searched a whole day for the required ports, that need to be tunneled through ssh and maybe this information is also useful for someone else :-)
Ciao
Christian