Kapil Hari Paranjape wrote:
1. Creating a secure tunnel to your server machine.
Normally this is done by giving your server machine a publicly
accessible WAN address a.b.c.d and starting the ssh daemon on it.
Then from the client machine you run
ssh -L NNNN:localhost:MMMM -f -q -N a.b.c.d
This starts a tunnel which connects from the client machine port
NNNN to the port MMMM on the server machine.