@Adam All ports are allowed, i can now see the server online in the control panel and I was able to add the backup role. But when I attempted to move a website to the new server and it errors out with this:
[13:45:04 09/08/2023] Provisioning website redacted-redacted-4ec6-baf6-redacted to role Backup on server redacted-1477-redacted-redacted prior to website migration
[13:45:04 09/08/2023] Re-creating btrfs subvolume
[13:45:05 09/08/2023] Re-creating user on bkupd
[13:45:06 09/08/2023] Authorising website keys
[13:45:06 09/08/2023] Migrating role data for Backup from redacted-redacted-43b6-redacted-redacted to redacted-1477-redacted-redacted
[13:45:06 09/08/2023] Transferring backup role data
[13:45:06 09/08/2023] Generating move key
[13:45:08 09/08/2023] Authorising transfer key on destination bkupd
[13:45:08 09/08/2023] Transferring snapshot snapshot-1694115422872 data
[13:47:18 09/08/2023] Data migration failure: internal: "Error { kind: RsyncGeneralFailure, entity: Some(ProcOutput), message: Some(\"stderr: ssh: connect to host xxx.xxx.xxx.xxx port 222: Connection timed out\r\nrsync: connection unexpectedly closed (0 bytes received so far) [sender]\nrsync error: unexplained error (code 255) at io.c(235) [sender=3.1.3]\n\nstdout: \") }"
[13:47:18 09/08/2023] Cleaning up failed backup transfer from destination server
[13:47:18 09/08/2023] Removing btrfs subvolume from server
[13:47:18 09/08/2023] Removing bkupd user from server
I assume this is derivative of the ephemeral ports you mentioned.