PuTTY local vs remote port forwarding: which default limits accidental public exposure?
I need to pick one forwarding approach in PuTTY for a team that tunnels to internal services through a shared jump host, and the deciding constraint is avoiding accidental public access to those services. PuTTY documents both options under Connection > SSH > Tunnels: local forwarding binds a port on the client machine, while remote forwarding asks the