Allow rdp and ping only

You need to enable icmp and not limit yourself with ipprotocol tcp.
See this example for ideas: An example of what an advanced ZeroTier network rule set might look like · GitHub