当我更改SSH端口时，SFTP无法访问，但SSH工作正常吗？

我使用CloudFlare whitelist为httpd使用iptables防火墙。

这是我的iptables规则，我已经将SSH端口更改为2204

 Chain INPUT (policy DROP) target prot opt source destination ACCEPT tcp -- 199.27.128.0/21 anywhere multiport dports http,https ACCEPT tcp -- 198.41.128.0/17 anywhere multiport dports http,https ACCEPT tcp -- 197.234.240.0/22 anywhere multiport dports http,https ACCEPT tcp -- 190.93.240.0/20 anywhere multiport dports http,https ACCEPT tcp -- 188.114.96.0/20 anywhere multiport dports http,https ACCEPT tcp -- 173.245.48.0/20 anywhere multiport dports http,https ACCEPT tcp -- 172.64.0.0/13 anywhere multiport dports http,https ACCEPT tcp -- 162.158.0.0/15 anywhere multiport dports http,https ACCEPT tcp -- 141.101.64.0/18 anywhere multiport dports http,https ACCEPT tcp -- 131.0.72.0/22 anywhere multiport dports http,https ACCEPT tcp -- 108.162.192.0/18 anywhere multiport dports http,https ACCEPT tcp -- 104.16.0.0/12 anywhere multiport dports http,https ACCEPT tcp -- 103.31.4.0/22 anywhere multiport dports http,https ACCEPT tcp -- 103.22.200.0/22 anywhere multiport dports http,https ACCEPT tcp -- 103.21.244.0/22 anywhere multiport dports http,https ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- 116.2.22.0/24 anywhere tcp dpt:b2-license 

之后，我可以正常访问SSH，但SFTP我不能。 看起来像我的新SSH端口与b2-license端口相同。

这是我面临的问题？

• 链接pfsensenetworking（网桥，vlan）
• Windows客户端 – GPO，拒绝networking访问，但允许rdp
• 华为Secospace USG 2000在非默认端口
• 无法连接到绑定到127.0.0.1的服务
• 广域网静态IP与鲤鱼，但不同的GW

这是我从FileZilla得到的错误

 Status: Waiting to retry... Status: Connecting to xx.xx.xx.xx:2204... Response: fzSftp started, protocol_version=4 Command: open "[email protected]" 2204 Error: Connection timed out after 20 seconds of inactivity Error: Could not connect to server 

并用ssh

 Last login: Sun Jul 31 14:07:34 2016 from my-ip 

更新：我可以通过Tunilier连接到sftp，但无法通过FileZilla进行连接

我非常感谢在这种情况下有任何想法..

 ssh -p 2204 [email protected]