# from nat'ed box.
ssh -R 10022:localhost:22 user@1.2.3.4