Back out the second iptables rule, now that we know what the problem was - we need to open a firewal rule on each minion.