H’m. Can ssh to the router, but not between boxes. iptables-fu is weak. Happily, Day 9 of /r/linuxupskillchallenge is very topical!