re ssh tunnelling - https://wiki.archlinux.org/index.php/Secure_Shell#Forwarding_other_ports
also see https://wiki.archlinux.org/index.php/Secure_Shell#Encrypted_SOCKS_tunnel