adding ssh to the nat