[SSHD-766] Separate forwarding filter functionality according to sshd-config options

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.0
• Fix Version/s: 1.7.0
• Labels: config forwarding sshd
• Assignee: Lyor Goldstein
• Reporter: Lyor Goldstein
• Created: 28/Aug/17 11:25
• Updated: 28/Aug/17 16:35
• Resolved: 28/Aug/17 16:35

Description

The sshd_config file contains separate options for the various forwarding options:

• AllowAgentForwarding - Specifies whether ssh-agent forwarding is permitted. The default is ''yes''.
• AllowTcpForwarding - Specifies whether TCP forwarding is permitted. The default is ''yes''.
• X11Forwarding - Specifies whether X11 forwarding is permitted.The default is ''no''

The ForwardingFilter implements all 3 of the options in one interface - we should split it so we can allow more fine-grained control and also support these options when specified via command line -o XXX options