iptables --table nat -A PREROUTING -s 0/0  -d xx.xxx.xxx.xxx -p tcp -m tcp --dport 2022 -j DNAT --to-destination 192.168.1.63:22

set service nat rule 445 description "tcp ssh"
set service nat rule 445 type destination
set service nat rule 445 destination address xx.xxx.xxx.xxx
set service nat rule 445 destination port 2022
set service nat rule 445 protocols tcp
set service nat rule 445 inbound-interface eth1
set service nat rule 445 inside-address address 192.168.1.63
set service nat rule 445 inside-address port 22