Are you blocking ICMP traffic at all? If I be remembering correctly doesn't RPC rely on ICMP?