I just added this port forwarding rule to access my ssh server (192.168.100.20) in the WAN network:
I noticed that the port 2222 is open on my Turris (port scan), but I can not login with
ssh -p 2222 192.168.1.1
from the LAN.
Update:
After some offline help: Turns out that the SSH server did not accept the username/password login method (as logged nicely to /var/log/auth.log). I leave the post here. Maybe it will be helpful to someone later.