I'm not sure when this stopped working, but I notice that all incoming ssh requests are being blocked for bad code signature. My rule is to allow connections from any server to launchd port 22 TCP. But any attempt results in a temporary deny rule.
If I disable "check process identity" for that rule, everything works again.
That code sig check is for the sshd daemon that comes with Mojave, right, or maybe for launchd....either way, Apple binaries, correct?
Is this a glitch or have I missed something?