firewall 配置端口转发 失败，知道的帮看看？

配置信息如下，正常22端口可登陆
root@localhost ~# firewall-cmd --zone=public --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: ens32
sources:
services: ssh dhcpv6-client
ports:
protocols:
masquerade: yes
forward-ports: port=888:proto=tcp:toport=22:toaddr=
source-ports:
icmp-blocks:
rich rules:
root@localhost ~# ssh root@192.168.100.188 -p 888
ssh: connect to host 192.168.100.188 port 888: Connection refused