Just to let you all know, I got the ssh problem figured out. I had to add the custom non standard ports to the input chain - actually, the inet-in rule in my case. It now works now.