on-path TCP port blocking may look like TLS Interference

Describe the bug

GFW of China may use TCP RST injection to block ports but ignore TCP SYNs ( or TCP segments without data? ).

A few comments on gfw.report mentioned this: https://gfw.report/publications/sp25/zh/#isso-1014

Issue "CDN 77 fronts appear to be blocked in China": https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/168

To Reproduce

Here are some knowned affected IPs:

104.21.16.1
104.21.32.1
104.21.48.1
104.21.64.1
104.21.80.1
104.21.96.1
104.21.112.1
2606:4700:3030::6815:2001
2606:4700:3030::6815:3001
2606:4700:3030::6815:4001
2606:4700:3030::6815:5001
2606:4700:3030::6815:6001
2606:4700:3030::6815:7001

195.181.172.6
195.181.172.3
195.181.172.5
143.244.51.58
143.244.51.246
89.187.187.14
89.187.187.12
89.187.187.18
89.187.187.5
143.244.51.249
156.146.44.89
89.187.187.19
89.187.187.4
143.244.51.250
143.244.51.59
89.187.187.13

Send some data with ncat:

$ nc 195.181.172.6 443
a
Ncat: Connection reset by peer.

https://globalping.io/?measurement=231YLnjCxgSkbufOy0001zCqK ( connect to 195.181.172.4:443 )
https://globalping.io/?measurement=2lRiHx0zzmKz5ST5D0001zCqS ( connect to 195.181.172.4:443 )

Expected behavior

A clear and concise description of what you expected to happen.

Screenshots

If applicable, add screenshots to help explain your problem.

System information (if applicable):

• Device: [e.g., iPhone6]
• OS: [e.g., iOS8.1]
• OONI Probe version: [e.g., 3.11.0]

Additional context

Add any other context about the problem here.