I'm honestly embarassed asking this question but for the life of me I've been unable to resolve the issue. ICMP makes it to ingress but telnet fails from remote subnets. There is another router in front of this device on the same subnet as the ingress, with no ACL's, and this device has no problems with telnet. Anything coming from the internet cannot get a login prompt.
ip address x.x.x.37 255.255.255.248
ip route 0.0.0.0 0.0.0.0 x.x.x.33
line vty 0 4
I've also tried adding "transport input telnet", but that did not correct my problem.