just because ping works doesnt mean your app will. learned this the hard way when ICMP was allowed but TCP 8080 was blocked. always test the actual ports