“Firewalls are great, until they block a port you need.”
(Dan Gunter, discussing how to tunnel XMPP through ssh)