Re: limit certain ports to be forwarded through ssh account..

[Daniele P. <debian@tovel.it>]

On Sunday 15 October 2006 22:47, Eric Persson wrote:
> Hi,
>
> I'm interested in allowing a few selected users forward their
> imap/smtp traffic over ssh. But I also want to prevent them from
> doing anything but that, they shouldnt be able to forward any ports,
> or get a shell at all, just some certain predefined ports.
> Is this possible with openssh or any other sshd?

Hi,
Have a look to PermitOpen in sshd_confing for openssh > 4.
You could use the /bin/nologin shell for those users.

Regards,
Daniele