is a method to establish an SSH connection from a random port on localhost to a particular port on the destination machine. Therefore data from other Internet services like FTP, X11, POP or HTTP will be tunneled through the encrypted connection. Thereby these usually insecure protocols benefit from the encryption method of the SSH connection and can be used, even when the unencrypted gateways/ports are closed.