ssh can't access LAN on MacOS Sequoia, "No route to host"

[thom-nic]

Output of brew config

HOMEBREW_VERSION: 4.4.29-11-g35897fe
ORIGIN: https://github.com/Homebrew/brew
HEAD: 35897fe49cfde1c3f7076768145da01f5180cfbc
Last commit: 2 days ago
Branch: master
Core tap HEAD: ebcc428c38326b1b464a47690124932c03e530b9
Core tap last commit: 2 days ago
Core tap JSON: 09 Apr 14:32 UTC
Core cask tap HEAD: 74719541d5bc4510f820904ac954dbd89ad9f9f7
Core cask tap last commit: 2 days ago
Core cask tap JSON: 09 Apr 14:32 UTC
HOMEBREW_PREFIX: /usr/local
HOMEBREW_CASK_OPTS: []
HOMEBREW_DISPLAY: :0.0
HOMEBREW_EDITOR: vim
HOMEBREW_GITHUB_API_TOKEN: set
HOMEBREW_MAKE_JOBS: 12
HOMEBREW_SORBET_RUNTIME: set
Homebrew Ruby: 3.3.7 => /usr/local/Homebrew/Library/Homebrew/vendor/portable-ruby/3.3.7/bin/ruby
CPU: dodeca-core 64-bit kabylake
Clang: 17.0.0 build 1700
Git: 2.49.0 => /usr/local/bin/git
Curl: 8.7.1 => /usr/bin/curl
macOS: 15.4-x86_64
CLT: 16.3.0.0.1.1742442376
Xcode: 16.3

Output of brew doctor

Please note that these warnings are just used to help the Homebrew maintainers
with debugging if you file an issue. If everything you use Homebrew for is
working fine: please don't worry or file an issue; just ignore this. Thanks!

Warning: Some installed casks are deprecated or disabled.
You should find replacements for the following casks:
  microsoft-remote-desktop

Warning: You have the following deprecated, official taps tapped:
  Homebrew/homebrew-cask-versions
  Homebrew/homebrew-cask-fonts
  Homebrew/homebrew-services
Untap them with `brew untap`.

Warning: Unbrewed dylibs were found in /usr/local/lib.
If you didn't put them there on purpose they could cause problems when
building Homebrew formulae and may need to be deleted.

Unexpected dylibs:
  /usr/local/lib/libLabJackM-1.21.0.dylib
  /usr/local/lib/libPCBUSB.0.13.dylib
  /usr/local/lib/libusb-1.0.0.dylib

Warning: Unbrewed header files were found in /usr/local/include.
If you didn't put them there on purpose they could cause problems when
building Homebrew formulae and may need to be deleted.

Unexpected header files:
  /usr/local/include/LabJackM.h
  /usr/local/include/PCBUSB.h
  /usr/local/include/libusb-1.0/*

Warning: You have unlinked kegs in your Cellar.
Leaving kegs unlinked can lead to build-trouble and cause formulae that depend on
those kegs to fail to run properly once built. Run `brew link` on these:
  docker
  docker-compose
  libusb

Warning: Homebrew's "sbin" was not found in your PATH but you have installed
formulae that put executables in /usr/local/sbin.
Consider setting your PATH for example like so:
  echo 'export PATH="/usr/local/sbin:$PATH"' >> ~/.zshrc

Description of issue

Hey there - I just upgraded to MacOS Sequoia and now I'm getting the error ssh: connect to host <local address> port 22: No route to host.

This is a MacOS Sequoia privacy feature however I can't figure out how to enable it for homebrew ssh.

Just to confirm, I can ssh -T git@github.com or any other non-LAN address.

I can /usr/bin/ssh <local address> and it works. So the issue is isolated to Homebrew OpenSSH.

When I open the System Settings::privacy & Security::Local Network settings panel, I see my terminal emulator among other applications, but no ssh and I don't get a prompt to allow access.

Update: I've also realized that /usr/local/opt/curl/bin/curl has the same behavior. I can /usr/local/opt/curl/bin/curl google.com but not a local network address, but /usr/bin/curl can fetch the local address. In this case the error is curl: (7) Failed to connect to <address> port 80 after 50 ms: Could not connect to server.

Update 2: same for rsync

[thom-nic]

Update: even though some system programs worked (namely ping and /usr/bin/ssh) it turns out the culprit was my terminal emulator - even though it was granted permission in the Settings -> Privacy & Security -> Local Networking pane.

I had to uninstall the terminal emulator app then reboot. Then reinstall the app and re-grant permission.

ref: https://apple.stackexchange.com/a/479544/74059