set GatewayPorts to no in sshd_config