permitopen for -R connections?

[Markus Friedl]

> I assume I will have to add a new check function in:
> 
>  serverloop.c:server_input_global_request

yes, for ssh2.

for ssh v1 it's SSH_CMSG_PORT_FORWARD_REQUEST
for ssh v2 SSH2_MSG_GLOBAL_REQUEST with "tcpip-forward"

-m