What about reverse & dynamic ssh tunnels? (ssh -R or ssh -D instead of ssh -L)