I have created a jumphost/bastion, that will act just as that - a jumphost to certain hosts:ports.
I am aware of that I can limit users/groups with the following:
Match User Alice PermitOpen some.host.tld:80 another.host.tld:22 third.host.tld:443
And due some requirements, I need to be able to utilize SOCKS-proxies. This is enabled by the following:
PermitTTY yes PermitTunnel yes AllowTcpForwarding yes
This works as expected.
However.. How do I ensure that only the application that the client specifically allowed is the only application (such as Firefox) is using the SOCK-proxy and not some random other application on the client? Can I limit the sessions/applications using the connection on the SSH-server?
I did try with "
MaxSessions 1", but sadly it does not seems to apply on SOCKS-proxies.