En reverse tunnel:

ssh -R 1337:localhost:22 remote_user@remote_server