[lohszvu]

That's not how networking works. Incoming connections are usually blocked which is what this is for. It punches a hole through your firewall by using an established ssh tunnel to forward traffic over. You don't need to allow incoming anything to use this service

[avh02]

Yes, but there are organizations that block outgoing ssh connections.