[cft]

http://www.faqs.org/docs/iptables/traversingoftables.html Table nat is traversed <b>before</b> filter table. Therefore, the rule iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT is unnecessary.

[gcb]

Everyone, hear the post above.

Damn little arrows and imprecise HTC touchscreens... downvoted you by mistake