search for: allow_nonlocal_port_forward_destin

...forwarding, the user can port forward to machines that are on the same network as the ssh server which don't have personal firewalls installed, et al. We didn't find anything that would make OpenSSH server behave like this. So we edited the code and added a config file option called "allow_nonlocal_port_forward_destinations" and corresponding code in serverloop.c in the server_request_direct_tcpip function: if (((strcmp(target, "localhost") == 0) && (!options.allow_nonlocal_port_forward_destinations)) || (options.allow_nonlocal_port_forward_destinations)) {...