It has been a while since I learned and tried tunneling over ssh adn looked at the port knocking docs. Listening to binrev (162) I learned that you can tunnel over dns. I googled for this and saw quite a while ago it was story on slashdot.
I just read another article that said people are also using ICMP messages as a tunnel. I thought this was pretty cool. Here is the link to the story: