The original ejb3.delpoyer/META-INF/jboss-service.xml contains a short InvokerLocator URL, which works fine from localhost and my home network, but not from the internet. I had serious difficulty figuring out that I have to change it completely and put an invoker tag inside the Configuration attribute to describe server bind address and client connection parameters separately.
I was trying to change firewall settings and bind addresses here and there, being in a dead end street for a long time. Please save others from this frustration, either by documentation or other defaults to this xml.

Another thing, which may be a minor bug: when the invoker is misconfigured, the client never times out.

JBoss is the best, keep up the good work!