Configure the firewall on the terminal server to only allow outgoing SSH connections to the allowed target. Disable SSH tunneling on the target SSH server.
Hard code an IP in Putty
Configure the firewall on the terminal server to only allow outgoing SSH connections to the allowed target. Disable SSH tunneling on the target SSH server.