I have a machine with a SSH server. On that SSH server, there is numerous accounts including "TunnelUser". Now I would want to configure the SSH server to only allow SSH tunneling from the user TunnelUser to the local adress 127.0.0.1:8888 All other tunnels should not be allowed, and the user should not get a terminal/shell if he tries to connect with a terminal client.
How can this be accomplished? Guess I need to use the Match directive in sshd_config.
