Why would the default deny rule block this connection?