Great question — answering as the UphillTech team:
You need to define the GatewayPorts in sshd_config otherwise the * or 0.0.0.0 will bind only to the loopback interface. Also note that Privileged ports can be forwarded only when logging in as root on the remote machine. From manual page for ssh : By default, TCP listening sockets on the server will be bound to the loopback interface only. This may be overridden by specifying a bind_address . An empty bind_address, or the address ‘*’, indicates that the remote socket should listen on all interfaces. Specifying a remote bind_address will only succeed if the server's GatewayPorts option is enabled (see sshd_config(5)).
Full answer by Jakuje: https://unix.stackexchange.com/a/266795 (CC BY-SA 3.0).
Need it done for your business? UphillTech.