Peter G. wrote:
Doesn't that mean the firewall is open on port 22 (for both ipv4/6, even)?
netstat lists network port information. It does not know about or list firewall configuration information.
iptables is the command-line tool to view, add, delete, or change firewall rules.
# iptables -L # lists default table rules
# iptables -L | grep ssh ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh