Approve a port forward

A rule waits with Waiting for approval when:

• it binds to anything but 127.0.0.1 or localhost, so other devices on your network could reach the port, or
• it comes from a team vault or a vault shared with you, so someone else can change it.

Approve it

1. Start the rule.
2. Check what it opens, through which host and which trusted host keys.
3. Approve it.

The approval stays on this device only. It’s asked again after any change to the rule or to the host it goes through.

A team can also require forwards to listen on this device only (Team policies).

To create rules, see Forward a port.