Alrighty, let’s go with Mike’s suggestion. Run the following as root on your Debian VM to see what AMP thinks about your firewall situation:
sudo ampinstmgr dumpfirewall
Post the output here as text so we can take a look at what AMP finds. This should help us understand what’s going on with any firewall settings or lack thereof.