PS - the answer to my original question about which linux ports had to be enabled is: 80 (if you want another machine to get at the port) - the other four ports are internal and do not need firewall access (8005, 8009, 8080, 8443)
over and out on this one.