Still not sure the problem. I'm going to nuke the UT box that was recently set up, not the UT box acting as a server. The UT box acting as a server is working correctly; clients can connect without issue, site-to-site from Asia is connected and routing without issue but anything trying to connect from behind this newly created UT box (after we messed with it) is borked.

I'll nuke it tomorrow.