My understanding is when creating an ssh tunnel to a remote machine, the ports become open on that machine for anyone to use and connect back to my local box (not just the user who opened the tunnel). Is there a way to restrict access to the ports opened on the remote machine to a specified unix group? I was thinking this may be possible via an iptables rule or some other TCP/IP port restriction but I am not entirely sure.
Thanks