Sorry for the long post. Here are some logs taken from the client and the CHR I am attempting to forward through. I logged for both forwarding 8122 > 22 and 22 > 22. Forwarding 22 > 22 successfully connects.
Log from client system when forwarding port 8122 to port 22
08:44:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (SYN), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 60
08:44:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (SYN,ACK), aaa.bb.ccc.218:8122->192.168.200.26:58757, len 60
08:44:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 52
08:44:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
08:44:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
08:44:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
08:44:10 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
08:44:12 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
08:44:15 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
08:44:22 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
08:44:37 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
08:44:55 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,FIN), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 52
08:45:05 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,FIN,PSH), 192.168.200.26:58757->aaa.bb.ccc.218:8122, len 68
Log from CHR when forwarding port 8122 to port 22
10:44:12 firewall,info dstnat: in:ether2-Wan out:(unknown 0), src-mac b8:69:f4:xx:xx:xx, proto TCP (SYN), cc.bbb.dd.10:58757->aaa.bb.ccc.218:8122, len 60
10:44:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (SYN), cc.bbb.dd.10:58757->172.21.2.3:22,NAT cc.bbb.dd.10:58757->(aaa.bb.ccc.218:8122->172.21.2.3:22), len 60
10:44:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (SYN,ACK), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 60
10:44:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK), cc.bbb.dd.10:58757->172.21.2.3:22, NAT cc.bbb.dd.10:58757->(aaa.bb.ccc.218:8122->172.21.2.3:22), len 52
10:44:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:44:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:44:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:44:13 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:44:14 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:44:16 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:44:19 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:44:27 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:44:42 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:45:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:46:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 73
10:46:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,FIN), 172.21.2.3:22->cc.bbb.dd.10:58757, NAT (172.21.2.3:22->aaa.bb.ccc.218:8122)->cc.bbb.dd.10:58757, len 52
Log from client when forwarding port 22 to port 22
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (SYN), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 60
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (SYN,ACK), aaa.bb.ccc.218:22->192.168.200.26:37967, len 60
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 52
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 68
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK), aaa.bb.ccc.218:22->192.168.200.26:37967, len 52
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK,PSH), aaa.bb.ccc.218:22->192.168.200.26:37967, len 73
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 52
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 484
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK,PSH), aaa.bb.ccc.218:22->192.168.200.26:37967, len 1332
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 76
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK), aaa.bb.ccc.218:22->192.168.200.26:37967, len 52
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK,PSH), aaa.bb.ccc.218:22->192.168.200.26:37967, len 332
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 52
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 324
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK,PSH), aaa.bb.ccc.218:22->192.168.200.26:37967, len 900
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 52
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 68
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 104
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK), aaa.bb.ccc.218:22->192.168.200.26:37967, len 52
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK,PSH), aaa.bb.ccc.218:22->192.168.200.26:37967, len 104
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 52
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,PSH), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 120
09:26:09 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK,PSH), aaa.bb.ccc.218:22->192.168.200.26:37967, len 136
09:26:09 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 52
09:26:28 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK,FIN), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 52
09:26:28 firewall,info input: in:ether1 out:(unknown 0), src-mac 00:50:56:zz:zz:zz, proto TCP (ACK,FIN), aaa.bb.ccc.218:22->192.168.200.26:37967, len 52
09:26:28 firewall,info output: in:(unknown 0) out:ether1, proto TCP (ACK), 192.168.200.26:37967->aaa.bb.ccc.218:22, len 52
Log from CHR when forwarding port 22 to port 22
11:26:12 firewall,info dstnat: in:ether2-Wan out:(unknown 0), src-mac b8:69:f4:xx:xx:xx, proto TCP (SYN), cc.bbb.dd.10:37967->aaa.bb.ccc.218:22, len 60
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (SYN), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 60
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (SYN,ACK), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 60
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 52
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK,PSH), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 68
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 52
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 73
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 52
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 1332
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK,PSH), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 484
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK,PSH), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 76
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 52
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 332
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 52
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK,PSH), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 324
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 900
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 52
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK,PSH), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 68
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK,PSH), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 104
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 52
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 104
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 52
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK,PSH), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 120
11:26:12 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,PSH), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 136
11:26:12 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 52
11:26:31 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK,FIN), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 52
11:26:31 firewall,info forward: in:ether1-Lan out:ether2-Wan, src-mac 00:0c:29:yy:yy:yy, proto TCP (ACK,FIN), 172.21.2.3:22->cc.bbb.dd.10:37967, NAT (172.21.2.3:22->aaa.bb.ccc.218:22)->cc.bbb.dd.10:37967, len 52
11:26:31 firewall,info forward: in:ether2-Wan out:ether1-Lan, src-mac b8:69:f4:xx:xx:xx, proto TCP (ACK), cc.bbb.dd.10:37967->172.21.2.3:22, NAT cc.bbb.dd.10:37967->(aaa.bb.ccc.218:22->172.21.2.3:22), len 52