Re: Restrict a client port-forward to 1 port

--- On Thu, 8/13/09, Adriana Rodean <adrya1984@xxxxxxxxx> wrote:

Hi again,

Maybe i didn't expressed myself right.
I want client X to be able to connect with this command:
ssh -L
30300:localhost:8080 -R 1037:localhost:55555
Client Y to be able to connect with: ssh -L
30300:localhost:8080 -R
1038:localhost:55555
and so on
but client Y should be forbidden to connect with:  ssh
-L
30300:localhost:8080 -R 1037:localhost:55555

From what I can tell, your goal is to restrict certain REMOTE port forward values. I do not think it is possible to place restrictions on REMOTE port forwards if port forwarding is enabled in sshd_config. In the authorized_keys, you can list 'permitopen' options, but this only applies to LOCAL port forwards.