Since I’m always forgetting, the following is necessary on the host box if you’re running virtual machines w/ networking configured in NAT mode:
# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
This also requires:
# sysctl -w net.ipv4.ip_forward=1
The entry below simply port forwards 2222 on the host to the virtual machine:
# iptables -t nat -A PREROUTING -p tcp --dport 2222 -j DNAT --to 192.168.237.2:22