Ssh Port Forward Configuration, Configuration Options

[Sarah Baker]

Greetings.
I've got BD Internet Security 2008 on Windows XP Pro.
I typically use cygwin and ssh to port forward to access remote websites
that are protected behind firewalls that I administer.

My typical command is
ssh -f user@machine -L port:locahost:port -N

I have not been able to find a firewall rule that would allow the traffic from this command.

The log complains...
[BDFTDIF][FILTER] Cannot get the packet's associated process.
[BDFNDISF][FILTER] Denied TCP packet. (dir = OUTBOUND, src addr = *localip*, src port = 1158, dst addr = *serverip*, dst port = 22)
(addresses have been removed)

The firewall profile rule I've defined is the most open machine to machine rule I could find.

Is there a way to make this work?
I have a workaround, which is to do the port forward without the
-f and -N options, but that means I have to leave a shell running
when I don't really need it.

Am I out of luck, or is there an option that would allow this?
-Sarah