Interestingly enough, I tried pinging public ip instead, as it still has a client-facing service running, and it seems to be a-ok with ping response 100%. My windows firewall rule for netmaker is to allow x.x.x.0/24 (nm-network ips)