fwknopd ssh iptables

Hi all, I would like to please ask for a little help with iptables, to setup fwknopd on my Asus-(Merlin rom) RT-AC87U with entware. My situation is that I can ssh into the router from the internal network. If I do a port scan from outside, everything is "stealth" - fine so far, so good... Now...