SSH Tunnelling: How can I stop users being able to access services bound to localhost via port forwarding?

I want to be able to offer ssh accounts on my Linux server for people to be able to use for SSH tunnelling. All accounts will be locked down with no interactive shell, for tunnelling/port forwarding purposes only. My problem is that I don’… Continue reading SSH Tunnelling: How can I stop users being able to access services bound to localhost via port forwarding?