In reply to the messages posted about not being able to access ssh on the
firewall itself, turns out it was the "Accept ESTABLISHED and RELATED
packets before the first rule". Things went fine after checking that. I
guess I was a little afraid of the "RELATED" part of that statement.
Thank you very much!