Objective:
to allow remote access to a box behind a firewall/nat router (without access to the router).

Hosts Involved:

   *-------*                *----------*                *------*
   | nated |----internal----| firewall |----Internet----| host |
   *-------*                *----------*                *------*

Tunnel setup:

   nated>  ssh1 -v -l host_username -R 7071:localhost:22 -g -C host.example.com

Connect to nated:

   host>  ssh -v -p 7071 -l nated_username localhost

philip at shuman.org