1. On the machine behind the firewall, initialize a reverse proxy, exposing a loopback port on the internet facing machine.
ssh -R 9000:localhost:22 user@internet-facing-machine
  1. On the internet facing machine, connect to the port created on the loopback port from the previous step.
    ssh -p 9000 user@localhost