(Sorry for two messages instead of one) The other issue is that with the solution above (change the sshd_config GatewayPorts setting) it is all or nothing. With the -g option combined with the -L option, you can choose to allow remote hosts to access some forwarded ports but not others. With the solution above, there is no way to do this except firewall rules.