The UserConnecting event is fired when someone connects to
wodSSHTunnel, but before they can actually transmit any data.
At this point, you can decide whether you want to allow the user to
use the channel or not.
Typically, based on a user's hostname and originating
port, you can see if this is an expected connection or not.
As there is no way to 'hide' listening sockets
from disallowed users, they will still
connect, but immediately disconnect if you deny them access.
By default, the Allow argument will
be set to False, unless you set the channel
listening on interface 127.0.0.1 -
as there is no security breach that can happen on the localhost
interface. As this behavior helps customers who cannot
handle events, we had no reasons to reject their
requests to set Allow = True
in such cases.