"unreachable - admin prohibited" message in SNMP/tcpdump

Just a small, helpful tidbit:

If you ever see the following in your tcpdump while resolving SNMP issues (when isn't SNMP having issues?):

ICMP host HOSTNAME unreachable - admin prohibited, length 76

It basically means that your iptables is blocking SNMP. This one has bit me on multiple occasions on boxes …

more ...