Prevent some port forwarding

From: doff (lefevred.antispoum_at_free.fr)
Date: 06/02/04


Date: Wed, 2 Jun 2004 10:32:41 +0200

Hello,

is there a way in openssh, to tell sshd to accept port forwarding, only
for one or two ports and reject others ?

I mean, a ssh client wants to redirect remote ports (for exemple 25) to
its local machine and he's got the right to do it.
No, on the server, I don't want him to redirect the port 23 to its local
machine, event if its ssh client request this.

Is it possible to do that ? and how ? in the sshd_config file ?

Rq : I can not setup an ip filter on the server.

Thanks,
Doff



Relevant Pages

  • Re: TCP Listener Problem
    ... If the local machine works and the remote doesn't, ... a "netstat -a" and see if the server is listening on the specified port. ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: question about x11 forwarding in ssh
    ... But my question was geared toward what is happening on the ssh client ... open a socket connection to the local X server? ... socket to localhost, port 6000 (on the ssh client side, not on the sshd ...
    (SSH)
  • Re: question about x11 forwarding in ssh
    ... > But my question was geared toward what is happening on the ssh client ... using whatever protocol the X server supports. ... which is the usual port on which a X server will listen for ... then that's what's used rather than a TCP connection (take a look at ...
    (SSH)
  • Re: ssh/telnet
    ... am trying to forward port 23 on the ssh client machine to port 23 on a ... My SSH client is WIN2K. ... My idea is to install openssh on a win2k server, ...
    (comp.security.ssh)
  • Re: connecting to MySQL db from Tomcat..
    ... The default MySQL server opens the port 3306 on your local machine for ... This port is used by the Connector/J to connect to the ... server, ...
    (comp.lang.java.help)