Using the ssh host as a SOCKS proxy in combination with http://www.meadowy.org/~gotoh/ssh/connect.c http://www.meadowy.org/~gotoh/ssh/connect.c is a lot easier

Using the ssh host as a SOCKS proxy in combination with http://www.meadowy.org/~gotoh/ssh/connect.c http://www.meadowy.org/~gotoh/ssh/connect.c is a lot easier than adding a separate tunnel for each host on the other side of the wall, as long as the intermediate host allows you to use it as a SOCKS proxy (DynamicForward option of ssh).