restricing port forwarding ports server-side

Damien Miller djm at
Sun Mar 16 01:00:51 EST 2003

Florian Weimer wrote:
> Vincent Danen <vdanen at> writes:
>>I know the book is a little dated, but has anything like this
>>appeared in openssh yet?
> We've got a proof-of-concept implementation of global and per-user
> port forwarding control.  We don't use it anymore, so the patches are
> still against 3.4p1, and they aren't thoroughly tested.
> <>

See also my even older KeyNote policy patches (check the archives). I'll probably revive them post-3.6.


More information about the openssh-unix-dev mailing list