# bind mysql standard port (3306) to given port (here: 8000) on localhost

ssh -N user@host -L 8000/127.0.0.1/3306

# bind vnc standard port (5900) to given port (here 8001) on localhost

ssh -N user@host -L 8001/127.0.0.1/5900

1. Allows encryption between client and server 
2. Bypasses filtered port, if any on the standard port for the given service.

Securely access (e.g. firewall filtered) remote services through ssh tunnel

mysql, security, ssh

Bash