macOS ssh_exchange_identification: Connection closed by remote host

I have two macOS machines using tailscale. I can successfuly share files between these using ‘taildrop’.

I also can ssh to machines over the LAN. They both are on the same LAN subnet.

However, when I try to ssh using tailscale assigned IPs I get error: ssh_exchange_identification: Connection closed by remote host

I tried to reproduce this, but am able to ssh to the macOS machine’s tailscale address.

“Connection closed by remote host” implies a TCP RST was sent to close the connection. Tailscale never sends an RST, even if an ACL blocks access it just times out. Is there possibly other software on the Mac which is blocking anything that doesn’t look like the LAN?

I was still able to ssh to the Mac with the macOS firewall turned on, it doesn’t appear to have a function which distinguishes LAN access.

Indeed, I had a local firewall issue related to ssh. Removed the rule and all is well.