Restrict port forwarding on server

Darren Tucker dtucker at zip.com.au
Fri Jun 12 17:17:06 EST 2009


Adriana Rodean wrote:
> Hi,
> 
> Is there a way to restrict port forwarding on the server?
> I want only port 8080 on the server to be available to clients.
> 
> Example when i give this command clients should be able to connect:
> ssh -L 30300:localhost:8080 ....
> When i give this for example clients should not be able to connect:
> ssh -L 30300:localhost:4040 ....
> 
> I tried this option in config file of server:
> PermitOpen localhost:8080
> but even with it i could still connect to 4040 for example

That should work.

Which config file did you change?  It should go in sshd_config and you 
need to restart sshd when you change that file.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


More information about the openssh-unix-dev mailing list