two questions about ssh tunneling