They do the same for Iceweasel: stable gets updated to the ESR x release around when version x.0.1 gets out.
Host <alias>
HostName <ip>
ProxyCommand ssh -W %h:%p <bastion host>