[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: sshd_config and OpenPermit

On Wed, 04 May 2011 04:41:32 +0200, Jerome BENOIT wrote:

> I am trying to restrict ssh port forwarding to one port on my Squeeze
> box: my current understanding is that I may play with the OpenPermit
> option in sshd_config. 

You meant "PermitOpen", right? :-)

> By default OpenPermit is set to `any': if I set
> it to , I observed not restriction at all: all port can
> still forward. 

How are you testing this?

I think when you set "PermitOpen=host:port" you are limiting your users 
to use local port forwarding on the specified host and port when they use 
local port forwading.

> On the otherhand, if I set  AllowTcpForwarding to `n' ,
> then OpenPermit permits no port.
> Do I miss something ?

AFAIK, "AllowTcpForwarding=no" should disable both, local and remote port 
forwarding (-L and -R), regardless the value of any other variable.



Reply to: