gcnovus wrote:

> I've just created a development server that I want restricted to local
> access only, but allow SSH tunneling, too. (Part of the reason is that
> I only have one public IP, but I wanted multiple SSL domains.)
>
> My router forwards public port 18020 to port 20 on my host machine.

You mean port 22 (ssh) not 20 (ftp-data)?

> I tried ssh -p 18020 -L 19000:localhost:19000 gcnovus@my.public.domain,
----------------------------------------------^^^^^^^^^^
localhost is wrong, it should be the address of your server:
my.public.domain, but you can also use the internal address if it has
one.

You may also look into using parameters -NfC in that tunnel, you need
at least -N.

HTH
--
René Berber