Thanks for the good suggestions, all. And yes, I’d tried the iptables route to no avail.
Turns out the hosting company (who knew we’d be using separate web and db servers) decided to go ahead and set up SELinux with everything on complete lockdown, thus preventing httpd from doing any networking.
