try running

iptables --flush

on the arch machine and then see if you can netcat and ping from the netmaker server