ip:2222 forward to 10.1.1.1:22 not working

[Joe Ellis <joee@lithodyne.net>]

i'm having a problem ssh'ing to an internal box from the external device.

this doesn't seem to work:
iptables -t nat -I PREROUTING -d $ip -p tcp --dport 2222 -j DNAT --to 
10.1.1.1:22

i figured that alone will work becuase i run this for vnc and it works 
perfectly:
iptables -t nat -A PREROUTING -p tcp -i eth0 -d $ip --dport
5900 -j DNAT --to-destination 10.254.0.10
iptables -t nat -A PREROUTING -p tcp -i eth0 -d $ip --dport
5800 -j DNAT --to-destination 10.254.0.10

when i run the first one for forwarding $ip:2222 to 10.1.1.1:22 it fails 
at the forward chain.  so i did the following just to be safe:
iptables -I FORWARD -j ACCEPT

if you need more info, let me know.

--
Joe Ellis
http://www.lithodyne.net