Restrict SSH Tunnel

[Hektor]

How can I restrict SSH Tunnels to certain users? Once that is in place, how do I restrict it to certain sites only? I'd also like only certain ports to be allowed. I don't want a bunch of users using my server as their SSH tunnel for file sharing.

I've considered a firewall, will this do the trick? What firewall should I use?

[Jordan]

I'm not sure how you can limit it to certain users but you can disable it by editing /etc/ssh/sshd_config and setting or adding AllowTcpForwarding to NO
.

sshd_config

AllowTcpForwarding No