From 14dce6df0c09bc264acac60ed2443d6ae044b52d Mon Sep 17 00:00:00 2001
From: Vincent Li <vincent.mc.li@gmail.com>
Date: Sun, 13 Apr 2025 11:10:23 -0700
Subject: [PATCH] firewall: allow SSH access to bridge interface

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
---
 src/initscripts/system/firewall | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index faa19e492..78986fdbf 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -458,6 +458,7 @@ iptables_init() {
 		ip link set $FWBRIDGE up
 		ip a add $FWBRIDGEIP/$FWBRIDGEMASK dev $FWBRIDGE
 		iptables -t filter -A GUIINPUT -i $FWBRIDGE -p tcp -m tcp --dport 444 -j ACCEPT
+		iptables -t filter -A GUIINPUT -i $FWBRIDGE -p tcp -m tcp --dport 22 -j ACCEPT
 	fi
 }