{"version":"2.1.315","anchor":"preview-tunnel-unlisted-port-probe-callback-and-policy-refu","canonical_anchor":"preview-tunnel-unlisted-port-probe-callback-and-policy-refu","heading":"Preview tunnels can refuse requests from other sessions","tier":"notice","area":"Preview","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.315\/e\/preview-tunnel-unlisted-port-probe-callback-and-policy-refu","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.315","markdown":"### Preview tunnels can refuse requests from other sessions\n\nPreview tunnels gain an option to refuse other sessions, require strict TLS and stop if the session changes, plus a report on unlisted ports\n\n**What**\n\nA preview tunnel is a connection that lets a hosted session reach a program running on a port, which is a numbered channel a program listens on. Two things changed:\n\n- When a status check probes a valid port that is not on the tunnel's list (between 1024 and 65535), Claude Code now reports it.\n\n- A new option makes the tunnel refuse requests from other sessions, insist on strict checking of secure (TLS) connections, and shut down with the reason `policy` if the session changes when the tunnel reconnects.\n\nBefore, the tunnel refused other sessions only when a tool server was attached to it.\n\n**Why**\n\nA tunnel can now be tied to one session, so another session cannot reach it through the same connection.\n\n- Area: Preview\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: yes"}