Match Group nicepeople PubkeyAuthentication yes PasswordAuthentication yes PermitEmptyPasswords no GatewayPorts no ChrootDirectory /opt/dummy_location/%u ForceCommand internal-sftp AllowTcpForwarding yes PermitOpen 192.168.0.8:22 PermitOpen 192.168.0.5:8080 # Or leave out the PermitOpen to allow forwarding to anywhere. HostbasedAuthentication no RhostsRSAAuthentication no AllowAgentForwarding no Banner none