.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.\" $OpenBSD: sshd.8,v 1.300 2018/06/06 18:24:15 djm Exp $
-.Dd $Mdocdate: June 6 2018 $
+.\" $OpenBSD: sshd.8,v 1.301 2018/06/07 11:26:14 jmc Exp $
+.Dd $Mdocdate: June 7 2018 $
.Dt SSHD 8
.Os
.Sh NAME
Forbids X11 forwarding when this key is used for authentication.
Any X11 forward requests by the client will return an error.
.It Cm permitlisten="host:port"
-Limit remote port forwarding with
+Limit remote port forwarding with the
.Xr ssh 1
.Fl R
option such that it may only listen on the specified host and port.
.Cm GatewayPorts
may further restrict listen addresses.
.It Cm permitopen="host:port"
-Limit local port forwarding with
+Limit local port forwarding with the
.Xr ssh 1
.Fl L
option such that it may only connect to the specified host and port.
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.\" $OpenBSD: sshd_config.5,v 1.271 2018/06/06 18:24:00 djm Exp $
-.Dd $Mdocdate: June 6 2018 $
+.\" $OpenBSD: sshd_config.5,v 1.272 2018/06/07 11:26:14 jmc Exp $
+.Dd $Mdocdate: June 7 2018 $
.Dt SSHD_CONFIG 5
.Os
.Sh NAME
.Sq *
can also be used in place of a port number to allow all ports.
By default all port forwarding listen requests are permitted.
-Note that
+Note that the
.Cm GatewayPorts
option may further restrict which addresses may be listened on.
.It Cm PermitOpen