"No route to host" when networking two qubes

I have a server qube and a client qube. The server qube is able to accept connections from other qubes, except one qube that I had not used in a while. I feel like I’m forgetting to run some command to unblock the connection, but I’ve gone through the firewall guide and I can’t figure out what that is. The last time i used this qube, it was able to connect just fine to the same server qube.

Both qubes have sys-firewall as the netvm, so I ran this command on the firewall:
sudo nft add rule ip qubes custom-forward ip saddr 10.137.0.35 ip daddr 10.137.0.38 ct state new,established,related counter accept

I also ran this command in the server qube:
sudo nft add rule qubes custom-input tcp dport 999 ct state new,established,related counter accept

When I try to telnet into the server qube on port 999 from the client qube, it fails immediately with “No route to host”. It’s as if it doesn’t even try to connect. What am I missing here?

Check the client qube’s network config:

ip a
ip r

Make sure that there is a default route in the output of ip r.

:man_facepalming:

I am the dumb. It was a firewall issue on the qube settings. I left it on “limit outgoing connections to…” but with an empty list :skull: