Artem Dmytrenko wrote/schrieb :

> Is it possible to configure ssh daemon so that it can enable
> forwarding to some ports but not others? For example, allow port
> forwarding to "localhost, ports 1000-5000", prohibit access to all
> other ports.

Be aware that if you try to disable port forwarding by sshd_config, it
may easily be circumvented. Here's an example: