MHR wrote: > 15:06:00.485527 IP sushi.ocroads.com > khan.sjhtca.com: ICMP host > sushi.ocroads.com unreachable - admin prohibited, length 68 Is there a firewall on sushi? Run iptables -L -n on it, it seems like a firewall is blocking the connection. If you don't have an explicit need for a firewall on sushi I'd suggest ensuring that iptables is not running /etc/init.d/iptables stop And verify the default settings of the firewall just incase it leaves them in a reject state with the iptables -L -n command above, e.g. # iptables -L -n Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination nate