Here port forwarding I means ALL kinds of port forwarding,
-D dynamic port forwarding(for socks4 and socks5 now),
-L local port forwarding to remote,
-R remote port forwarding to local. How to fine grained control them separately? I know there is also
permitopen option to permit only specified forwarding to host and port.
And I want to know
AllowTcpForwarding in sshd_config will do
-R, but not
How to allow
-D, but not
-R, or this is not possible? I have added
command="/bin/echo no-command" to the authorized_keys file.