Thanks for reply Till
excuse me but it can't be a firewall issue:
ispconfig cp is running on web1, not on web2.
web2 listen to the cp on web1, but web1 does not listen to ispconfig while it's on the same machine...
firewall is ok end mysql listen remote