hi, i've tried to do a port forwarding on scponly account (scponly on target computer) via 'ssh -N -L ...' command and was happy that it works. well, now i would like to know if it is possible to restrict some accounts so that it won't be possible. thanks, r.