Connect to linux box behind NAT destination (10.0.0.3) <- |NAT| <- source (192.168.1.105) SSH from the destination to the source (with public ip) ssh -f -N -R 19999:localhost:22 sourceuser@192.168.1.105 SSH from source to destination through above tunel ssh localhost -p 19999