iptables -t nat -A prerouting_rule -i $WAN -p tcp --dport 22 -j DNAT --to 10.1.1.2:22          
 iptables        -A forwarding_rule -i $WAN -p tcp --dport 22 -d 10.1.1.2 -j ACCEPT             
                                                                                                
 iptables -t nat -A prerouting_rule -i $WAN -p tcp --dport 80 -j DNAT --to 10.1.1.2:80          
 iptables        -A forwarding_rule -i $WAN -p tcp --dport 80 -d 10.1.1.2 -j ACCEPT