If that were true, I wouldn't be able to ssh to any other device on my LAN. But I can.
I found it buried in the documentation, you use a different port, 5624.
What I still don't understand is why I couldn't add the rule for ssh on port 22 to iptables. It simply didn't work. Possibly pilot error, since it's been a long time since I mucked around at that level.