BAH! I figured it out.

The NAT address I was using in the firewall for the new computer was already in use and the connections were going to the other computer which WAS NOT a ssh capable computer.

the ol' KISS (Keep It Simple Stupid) principle at work. I am NOT happy with myself about missing that for so long.
On a related note the firewall complains when you assign a second name to a PORT number but NOT a duplicate NAT address. Where is the logic in that....


-John