vi/etc/sysconfig/iptables
-AINPUT-mstate--stateNEW-mtcp-ptcp--dport22:9527-jACCEPT
serviceiptablesrestart