dear johnp
Personally I prefer to use pptp and then ssh to "internal" NIC
you'll not have the port 22 open,
you'll not have to set "accept ssh from not trusted networks"
this combinations works for me in almost all type of internet access around the world (hotels, internet cafes, bars, public hot spots, airport, data access through my mobile phone - even in roaming...)