After going through /etc/ with a fine toothed comb I found out it was my
/etc/resolv.conf
I had the name server set to a bogus ip address rather than the firewalls address.
Changed it to the correct on and shazam one working ssh with no hang ups.
I'm happy how far I have got with this system.
Now on to apache
I suspect I have a lot of reading to do in order to make sure I have security sewn up although ny default from reading it looks pretty good.
Cheers
Pico