Forge firewall rules

In forge, if you try and add an rule for port 22, it acts like it adds it, but it doesn't actually try and deploy it. Does it filter out all port 22 entries?

Does it keep you from trying to lock forge out? How can you lock down port 22?