From d919c0f93d22f16d898804b4c3b8809e57ab12c7 Mon Sep 17 00:00:00 2001
From: mango <mango082888-bit@users.noreply.github.com>
Date: Fri, 17 Apr 2026 06:49:44 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E9=98=B2=E7=81=AB=E5=A2=99=E9=85=8D?=
 =?UTF-8?q?=E7=BD=AE=E6=97=B6=E6=94=BE=E8=A1=8C=20SSH=2022=20=E7=AB=AF?=
 =?UTF-8?q?=E5=8F=A3=EF=BC=8C=E9=98=B2=E6=AD=A2=E9=94=81=E6=AD=BB?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 scripts/stream-unlock.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/scripts/stream-unlock.sh b/scripts/stream-unlock.sh
index 14eb60a..de6e288 100644
--- a/scripts/stream-unlock.sh
+++ b/scripts/stream-unlock.sh
@@ -242,10 +242,13 @@ configure_firewall_unlocker() {
     
     # 开放本地 DNS
     if [[ "$OS" == "debian" ]]; then
+        # 先放行 SSH，防止把自己锁在外面
+        ufw allow 22/tcp comment 'SSH'
         ufw allow 53/udp
         ufw allow 53/tcp
         ufw --force enable
     else
+        firewall-cmd --permanent --add-port=22/tcp
         firewall-cmd --permanent --add-port=53/udp
         firewall-cmd --permanent --add-port=53/tcp
         firewall-cmd --reload