Comment by jaywalk

At the very least, you need to provide the IP address(es) you'll be connecting from so that your users can poke the smallest hole possible in their firewall. Opening up 27017 to the world ain't happening.