It's possible to set TCP portmapping to client or server port behind firewall.
vulners.com/securityvulns/securityvulns:doc:3728