added /sbin/iptables -I INPUT -p tcp --dport 27017 -j ACCEPT to userdata. This isn't particularly safe but works for demo purposes only.