Changes since v2: - openssh is able to use UNIX socket forwards since 5.7 (and jessie has 5.7) so use that instead of socat. - split the part of child collection apart as it does not have antything to do with the tunnel problem