# useradd ftun

edit /etc/ssh/sshd_config and add the following line
GatewayPorts clientspecified

install /home/ftun/bin/shell-none.sh

edit /home/ftun/.ssh/authorized_keys to match following
---
command="/home/ftun/bin/shell-none.sh" ssh-rsa AAAA ... D/agQ== ftun@carleyfoundry
---
execute 
# iptables -t nat -A PREROUTING -d 10.0.0.201 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.0.0.201:10080
# iptables -t nat -A PREROUTING -d 10.0.0.201 -p tcp -m tcp --dport 22 -j DNAT --to-destination 10.0.0.201:10022