main logic for ssh -L tunnels