Expose the RPC port, 8080, along w/ the client port.
add 8080 to firewall authorize ingress.
Thanks for the patch Kelvin. It looks fine, but according to http://wiki.apache.org/cassandra/FAQ#ports, 8080 is the JMX port, so perhaps the name of the constant should be changed to reflect that?
that's a better name, patch updated.
The patch didn't apply to trunk because of WHIRR-117, so I've created a new equivalent one.
I've just committed this. Thanks Kelvin!