Quoting Walter Hafner <hafner at augusta dot de>:

> Simply type "sockjoin 22001 target-ip:22" in the "exec.php" page and add a
> rule on the WAN interface, allowing connections on port 22001 to the
> m0n0wall-ip and you're done. That's what i'm doing to get SSH access to our
> machines.
> 
> Question: Is this feature planned for an official image? If it is, i
> won't spend time coding a GUI for the relays. If it is not, i'd very much
> like to have at least a "sockjoin" binary in the 1.2 release image.
> 
> Comments? Questions?

Why don't just use Inbound NAT, which does basically the same thing: forwards 
all TCP/UDP packets to internal IP address?

Best regards,
Dmitry