OpenSSH is a free version of the SSH connectivity tools that technical users of the Internet rely on.
-
This patch adds a new ForwardPermit directive to sshd, which allows to restrict port forwarding to certain addresses only. The restriction is global and works for both password and ssh key authenticated accounts. Further allowed addresses and ports can be given in authorized_keys per key as usual. Example sshd_config lines:
ForwardPermit localhost:5901 localhost:5902 localhost:5903 localhost:5904
ForwardPermit localhost:5905 localhost:5906 localhost:5907 localhost:5908