If you are running sshd on port 10 then these rules won’t work as they allow incoming connections on port 22. Apply atheling’s patch, it is rather efficient in these situations, where incoming connections are not returned back from the correct wan link.
