It's not connecting with these ports opened. Using a packet sniffer I can see that it does the following steps
-> 1100 ok -> 1101 ok -> 3625 (blocked because 3625 is not a port we have opened)
Could anyone tell me what might be running on 3625? It must be a dynamic port allocated in run time as it doesn't exist in any of the JBoss config files. I guess its whatever service is accessed after communicating with the RmiPort in the HA-JNDI service.