Type: Select the type of the tunnel from the drop-down list. Valid choices are TCP and FTP.

Listen port: This is the number of the local port that the tunnel listens to, or captures. Do not use a reserved port number.

	Note
	The protocol or application that you wish to create the tunnel for may have a fixed port number (for example 143 for IMAP) that it needs to use to connect successfully. Other protocols or applications may require an offset (for example 5900 for VNC) that you will have to take into an account.

Allow local connections only: Leave a check mark in this box if you want to allow only local connections to be made. This means that other computers will not be able to use the tunnel created by you. By default, only local connections are allowed. This is the right choice for most situations. You should carefully consider the security implications if you decide to also allow outside connections.

Destination host: This field defines the destination host for the port forwarding. The default value is localhost.

	Note
	The value of localhost is resolved after the Secure Shell connection has been established, so here localhost refers to the remote host computer you have connected to.

Destination port: The destination port defines the port that is used for the forwarded connection on the destination host.

Tunnel using profile: Select the server to use for the tunnel.