There are two hoses coming through the firewall. They are not easy to get to, but they lead to and from the heater core. You can improve your access a little by removing whatever you can of the cowl molding and firewall insulation. My recollection is that the insulation is held in place by some plastic "screws" that can be removed with trim tools.

Use those two hoses to flush the heater core.