Install netcat on the firewall, and add an entry like this to your $HOME/.ssh/config: Host bob ServerAliveInterval 60 Hostname bob ProxyCommand ssh user at firewall nc -w 1 %h %p 2>/dev/null Alan .