restricing port forwarding ports server-side

[Damien Miller]

Florian Weimer wrote:
> Vincent Danen <vdanen at linsec.ca> writes:
> 
> 
>>I know the book is a little dated, but has anything like this
>>appeared in openssh yet?
> 
> 
> We've got a proof-of-concept implementation of global and per-user
> port forwarding control.  We don't use it anymore, so the patches are
> still against 3.4p1, and they aren't thoroughly tested.
> 
> <http://cert.uni-stuttgart.de/files/openssh/patches/>

See also my even older KeyNote policy patches (check the archives). I'll probably revive them post-3.6.

-d