Apparently the problem with Linode was that I never set up reverse DNS for my HE tunnel ep, so I was marked for fraud. All ok now.