@knc1: Yep, FW 2.x indeed does, but it's nice enough to not drop anything on port 22 (and it even logs it

).
Good point on NM, I don't use it myself, so I always forget about it... (On the other hand, I'm "enjoying" udev's new naming scheme for network devices... (systemd-udevd[7866]: renamed network interface usb0 to enp0s29f1u2) *sigh*).