Back when I faced similar issues SSHing to my home network from school and work, I forwarded port 443 external to 22 internal.

Very few people would be so silly as to close outbound port 443, and everyone expects that port to see encrypted traffic anyway, so it seemed like the logical choice.