Some people are behind NAT, no port redirections are in place, so if you have access to shell account on some live host, you can get yourself a ssh tunel