iptables -I INPUT -s 0.0.0.0 -p tcp --dport 22 -m comment --comment "allow ssh to this host from anywhere" -j ACCEPT