不知道为啥访问不了bugs.kde.org

桌面环境
1

很奇怪，手机开流量可以，家里的网络就不行，但挂代理又可以，有人遇到过吗

tracepath 的结果

tracepath bugs.kde.org        
 1?: [LOCALHOST]                      pmtu 1500
 1:  _gateway                                              0.339ms 
 1:  _gateway                                              0.408ms 
 2:  no reply
 3:  no reply
 4:  no reply
...30跳后终止

tracepath bugs.kde.org -l 1480
 1:  _gateway                                              0.255ms 
 2:  100.118.2.1                                           2.493ms 
 3:  no reply
 4:  no reply
 5:  no reply
 6:  no reply
 7:  221.183.89.97                                        23.012ms asymm  6 
 8:  221.183.46.249                                       18.738ms asymm  7 
 9:  no reply
10:  223.120.16.29                                       192.273ms asymm  9 
11:  no reply
12:  decix-gw.hetzner.com                                201.378ms asymm 11 
13:  core12.nbg1.hetzner.com                             203.181ms asymm 12 
14:  ex9k1.dc1.nbg1.hetzner.com                          194.468ms asymm 13 
15:  phoeni.kde.org                                      202.292ms reached
     Resume: pmtu 1480 hops 15 back 14

ping的结果

ping bugs.kde.org -v
ping: sock4.fd: 3 (socktype: SOCK_RAW), sock6.fd: 4 (socktype: SOCK_RAW), hints.ai_family: AF_UNSPEC

ai->ai_family: AF_INET, ai->ai_canonname: 'phoeni.kde.org'
PING phoeni.kde.org (85.10.198.44) 56(84) bytes of data.
From phoeni.kde.org (85.10.198.44) icmp_seq=1 Destination Port Unreachable
From phoeni.kde.org (85.10.198.44) icmp_seq=2 Destination Port Unreachable
From phoeni.kde.org (85.10.198.44) icmp_seq=4 Destination Port Unreachable
From phoeni.kde.org (85.10.198.44) icmp_seq=6 Destination Port Unreachable
From phoeni.kde.org (85.10.198.44) icmp_seq=7 Destination Port Unreachable
From phoeni.kde.org (85.10.198.44) icmp_seq=8 Destination Port Unreachable
From phoeni.kde.org (85.10.198.44) icmp_seq=9 Destination Port Unreachable
^C
--- phoeni.kde.org ping statistics ---
9 packets transmitted, 0 received, +7 errors, 100% packet loss, time 8098ms

按群友给的建议补充sni测试

openssl s_client -connect 85.10.198.44:443 -servername bugs.kde.org
40472BCE9A730000:error:8000006F:system library:BIO_connect:Connection refused:../crypto/bio/bio_sock2.c:114:calling connect()
40472BCE9A730000:error:10000067:BIO routines:BIO_connect:connect error:../crypto/bio/bio_sock2.c:116:
connect:errno=111

curl --resolve bugs.kde.org:443:85.10.198.44 https://bugs.kde.org -iv
* Added bugs.kde.org:443:85.10.198.44 to DNS cache
* Hostname bugs.kde.org was found in DNS cache
*   Trying 85.10.198.44:443...
* connect to 85.10.198.44 port 443 from 192.168.0.2 port 35566 failed: 连接被拒绝
* Failed to connect to bugs.kde.org port 443 after 199 ms: Couldn't connect to server
* Closing connection
curl: (7) Failed to connect to bugs.kde.org port 443 after 199 ms: Couldn't connect to server
2

有种说法是移动有 “墙中墙”，会封锁个别网站，但这些网站用其他运营商（比如电信、联通）是可以正常访问的。

3

我觉得不是这个原因，不然第二次tracepath一样得连不上

4

您手机的移动网络和家里的网络，运营商分别是谁？

5

都是移动

6

什么叫「不行」？来个「不行」的 curl -v？

7 
curl -v bugs.kde.org
* Host bugs.kde.org:80 was resolved.
* IPv6: 2a01:4f8:a0:600e::3
* IPv4: 85.10.198.44
*   Trying 85.10.198.44:80...
*   Trying [2a01:4f8:a0:600e::3]:80...
* Immediate connect fail for 2a01:4f8:a0:600e::3: 网络不可达
* connect to 85.10.198.44 port 80 from 192.168.0.102 port 59220 failed: 连接被拒绝
* Failed to connect to bugs.kde.org port 80 after 251 ms: Couldn't connect to server
* Closing connection
curl: (7) Failed to connect to bugs.kde.org port 80 after 251 ms: Couldn't connect to server
8

使用以下命令开始抓包：

sudo tcpdump -s0 -w a.pcap -vv 'host 85.10.198.44 or icmp'

然后换另一个终端窗口执行上述失败了的 curl -v bugs.kde.org。复现问题之后，切回之前的终端窗口，按 Ctrl-C 停止抓包。然后把生成的 a.pcap 文件发上来看看？

注意：抓包过程中会抓到所有 ICMP 包，因此请尽量不要让不相关的程序运行 ping 命令。

9

论坛传不了文件，转成base64了

1MOyoQIABAAAAAAAAAAAAAAABAABAAAA25dSaAMCBgBKAAAASgAAAIym375J3ECNXMilVggARQAA
PEXCQABABhkZwKgAAlUKxizROgBQ4PIEcgAAAACgAvrw3A8AAAIEBbQEAggKFgAj+wAAAAABAwMH
25dSaKLpCABmAAAAZgAAAECNXMilVoym375J3AgARQAAWANBAAAzAaiDVQrGLMCoAAIDA9kMAAAA
AEUAADxFwkAAMgYnGcCoAAJVCsYs0ToAUODyBHIAAAAAoAL68IBXAAACBAWgBAIIChYAI/sAAAAA
AQMDBw==
10

怎么看着像是 bugs.kde.org 阻止了你的连接？但是对 TCP 连接回 port unreachable 是怎么回事……需要一名网络工程师介入（

11

试试Firefox中使用DoH（DNS Over HTTPS），并将地址设置为https://v.recipes/dns-cn再试试呢