--- On Wed, 8/12/09, Adriana Rodean <adrya1984@xxxxxxxxx> wrote: > Hi, > > Is it possible to restrict a client port-forwarding to one > port? Yes, but you must force key authentication. Then, in the authorized keys, the 2 entries should look like this: permitopen="10.16.0.211:1037" ssh-dss AAAAB3NzaC1k...hyHN/a7BHblrelqwejrjqw..first.client.key...etc..elrjwerwer permitopen="10.16.0.211:1038" ssh-dss weafasdfds..second.client.key..werwerewerwe....etc.. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com