ubuntu主机上的ssh穿透访问失败

[flyflypeng]

家里的mac通过ssh穿透访问失败，提示如下的错误：

$ ssh -vvv flyflypeng@ubuntu-home
OpenSSH_8.6p1, LibreSSL 3.3.5
debug1: Reading configuration data /Users/pengfei/.ssh/config
debug1: /Users/pengfei/.ssh/config line 1: Applying options for ubuntu-home
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files
debug1: /etc/ssh/ssh_config line 54: Applying options for *
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/pengfei/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/pengfei/.ssh/known_hosts2'
debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
debug1: Connecting to cn-hn-dx-2.natfrp.cloud port 49638.
debug1: Connection established.
debug1: identity file /Users/pengfei/.ssh/id_rsa type 0
debug1: identity file /Users/pengfei/.ssh/id_rsa-cert type -1
debug1: identity file /Users/pengfei/.ssh/id_dsa type -1
debug1: identity file /Users/pengfei/.ssh/id_dsa-cert type -1
debug1: identity file /Users/pengfei/.ssh/id_ecdsa type -1
debug1: identity file /Users/pengfei/.ssh/id_ecdsa-cert type -1
debug1: identity file /Users/pengfei/.ssh/id_ecdsa_sk type -1
debug1: identity file /Users/pengfei/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /Users/pengfei/.ssh/id_ed25519 type -1
debug1: identity file /Users/pengfei/.ssh/id_ed25519-cert type -1
debug1: identity file /Users/pengfei/.ssh/id_ed25519_sk type -1
debug1: identity file /Users/pengfei/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /Users/pengfei/.ssh/id_xmss type -1
debug1: identity file /Users/pengfei/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.6
kex_exchange_identification: Connection closed by remote host
Connection closed by 123.160.10.39 port 49638

其中我在~/.ssh/config中已经配置ssh访问的端口为frpc提供的隧道端口

隧道的IP访问认证我已经做了，但是还是提示无效。

但是我做了一个实验，我用我用梯子proxy作为代理去去访问frpc指定的隧道端口，是能够成功穿透访问到目标主机的ssh服务。

[fakeboboliu]

我用我用梯子proxy作为代理去去访问frpc指定的隧道端口，是能够成功穿透访问到目标主机的ssh服务。

那总之我先排除下：你做访问认证的时候是不是通过梯子访问的？
如果是的话，客户端记录到的 IP 将会是梯子的 IP，你可以在日志中看到通过认证的 IP。

然后再排除另一个常见问题：是否误操作打开了 自动 HTTPS 项

[flyflypeng]

我刚查询了一下我frpc客户端的认证IP地址，的确是我梯子对应的服务器IP地址，并不是我真实的本地地址，所以我可能需要将网站加入到直连网站上，不要经过代理去获取授权IP地址。

Thanks！@fakeboboliu