[clug-talk] SSH Port forwarding / Tunnel restrictions

[Alex]

Hey all,
is it possible to allow users an SSH connection but limit any tunneling
capabilities to a specific ip

my goal is to setup a SSH server and a application server  and i want users
set up a SSH tunnel to a specific port on the application server
so that way they won't have access to any other hosts ports on the network..

i hoping the ssh server can do this via a config but it looks like i might
have to use a sshd with a iptables combo

but still not sure how to accomplish this..


Any suggestions!?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://clug.ca/pipermail/clug-talk_clug.ca/attachments/20090908/f951dd9b/attachment.html>