diff --git a/openwrt/openwrt-default-firewall.sh b/openwrt/openwrt-default-firewall.sh
index fe6badf..6b29ede 100644
--- a/openwrt/openwrt-default-firewall.sh
+++ b/openwrt/openwrt-default-firewall.sh
@@ -1,5 +1,6 @@
 #!/bin/sh
 # 2022-01-21, Nico Schottelius
+# 2026-05-25: updated to only allow incoming SSH and to set a password
 
 # Firewall configuration
 if ! uci show firewall | grep "name='Allow-SSH'"; then
@@ -38,8 +39,8 @@ uci set firewall.@rule[-1].name='Allow-Remote-SSH-Access'
 uci set firewall.@rule[-1].src='wan'
 uci set firewall.@rule[-1].proto='tcp'
 uci set firewall.@rule[-1].dest_port='22'
-uci set firewall.@rule[-1].enabled='0'
 uci set firewall.@rule[-1].target='ACCEPT'
+uci commit
 fi