其他机器连接这台22都正常,就这么一台国内阿里的通不了;阿里的连接其他也正常,就这台有问题;
SSH更换其他端口也正常;
看了这机子22端口针对我这个国内阿里,应该是彻底阻断了,试了iperf3和nginx监听22端口,也没能成。
知道有个端口通不了可太难受了,国内阿里还是我跳板机

ssh -v:
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug1: Connecting to y.y.y.y port 22.
debug1: Connection established.
debug1: identity file /home/xxx/.ssh/id_rsa type 0
debug1: identity file /home/xxx/.ssh/id_rsa-cert type -1
debug1: identity file /home/xxx/.ssh/id_ecdsa type -1
debug1: identity file /home/xxx/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/xxx/.ssh/id_ecdsa_sk type -1
debug1: identity file /home/xxx/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /home/xxx/.ssh/id_ed25519 type 3
debug1: identity file /home/xxx/.ssh/id_ed25519-cert type -1
debug1: identity file /home/xxx/.ssh/id_ed25519_sk type -1
debug1: identity file /home/xxx/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /home/xxx/.ssh/id_xmss type -1
debug1: identity file /home/xxx/.ssh/id_xmss-cert type -1
debug1: identity file /home/xxx/.ssh/id_dsa type -1
debug1: identity file /home/xxx/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3
kex_exchange_identification: read: Connection reset by peer
Connection reset by y.y.y.y port 22
tcpdump:
08:13:22.291567 IP x.x.x.x.36762 > 192.168.6.105.ssh: Flags [S], seq 1786785220, win 64240, options [mss 1460,sackOK,TS val 957421728 ecr 0,nop,wscale 7], length 0
08:13:22.291591 IP 192.168.6.105.ssh > x.x.x.x.36762: Flags [S.], seq 3651343212, ack 1786785221, win 65160, options [mss 1460,sackOK,TS val 3160063013 ecr 957421728,nop,wscale 7], length 0
08:13:22.319372 IP x.x.x.x.36762 > 192.168.6.105.ssh: Flags [R.], seq 1, ack 1, win 0, length 0
08:13:22.351357 IP x.x.x.x.36762 > 192.168.6.105.ssh: Flags [R.], seq 1, ack 643624084, win 0, length 0
08:13:22.373068 IP x.x.x.x.36762 > 192.168.6.105.ssh: Flags [.], ack 1, win 502, options [nop,nop,TS val 957421810 ecr 3160063013], length 0
08:13:22.373089 IP 192.168.6.105.ssh > x.x.x.x.36762: Flags [R], seq 3651343213, win 0, length 0
08:13:22.373363 IP x.x.x.x.36762 > 192.168.6.105.ssh: Flags [P.], seq 1:41, ack 1, win 502, options [nop,nop,TS val 957421810 ecr 3160063013], length 40: SSH: SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3
08:13:22.373366 IP 192.168.6.105.ssh > x.x.x.x.36762: Flags [R], seq 3651343213, win 0, length 0
08:13:22.449490 IP x.x.x.x.36762 > 192.168.6.105.ssh: Flags [R.], seq 41, ack 1, win 0, length 0
08:13:22.569656 IP x.x.x.x.36762 > 192.168.6.105.ssh: Flags [R.], seq 1, ack 1, win 0, length 0
看看ip被墙没
啊现在才8点就研究一早上了,mjj不睡觉的吗
@stonesnake #1 没有,其他国内机器连接正常,换端口也正常
@mzm #2 我醒得早,4点多醒的
给阿里噶了不就所有机器都能连上了
2个地方看看 我没记错的话 国内阿里22防火墙配置只进不出
Ip被墙
@RyanShang #3 那可能触发防御规则了,你等1小时再试试
@npccc202310 #5 这不是有时候得有个能访问v6的场景,然后在外面用手机连一个机器当跳板,就可以少配置不少东西。

@KefIe #6 我看tcp请求,阿里出走的是随机的36762端口,应该不是22。试了itdog,tcping机子目标22端口,全绿
@stonesnake #7 还有这个东西么