Problem solved. Thanks, all

[Scott Ellsworth]

It turned out to be a firewall problem - incoming ones were fine, but
outgoing ones were being eaten.  Once that was fixed, we were golden.

Thanks to the person who pointed out the tcpdump, while chatty, can be used
to watch traffic like this.

Scott