Teleport and remote port forwarding

[jimdell07]

Hello!
I have a some servers with openssh configured that uses a teleport.

Everything works fine, but I can't use ssh remote port forwarding.
My ~/.ssh/config on host1:

Host teleport.mycluster.com
   Port 3023
   ProxyCommand none

Host *.mycluster.com
   User myname
   ForwardAgent yes
   ProxyCommand ssh -o 'ForwardAgent yes' -p 3023 %[email protected] -s proxy:%h:%p

I am connecting from host1 to host2 and it works:

myname@host1:~/$ ssh -R 12345:127.0.0.1:22 host2.mycluster.com

but when connecting from host2, I get the following error:

myname@host2:~/$ ssh myname@localhost -p 12345 -v
OpenSSH_8.2p1 Ubuntu-4ubuntu0.2, OpenSSL 1.1.1f  31 Mar 2020
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 3: Applying options for *
debug1: Connecting to localhost [127.0.0.1] port 12345.
debug1: Connection established.
debug1: identity file /home/myname/.ssh/id_rsa type -1
debug1: identity file /home/myname/.ssh/id_rsa-cert type -1
debug1: identity file /home/myname/.ssh/id_dsa type -1
debug1: identity file /home/myname/.ssh/id_dsa-cert type -1
debug1: identity file /home/myname/.ssh/id_ecdsa type -1
debug1: identity file /home/myname/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/myname/.ssh/id_ecdsa_sk type -1
debug1: identity file /home/myname/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /home/myname/.ssh/id_ed25519 type -1
debug1: identity file /home/myname/.ssh/id_ed25519-cert type -1
debug1: identity file /home/myname/.ssh/id_ed25519_sk type -1
debug1: identity file /home/myname/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /home/myname/.ssh/id_xmss type -1
debug1: identity file /home/myname/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.2
kex_exchange_identification: Connection closed by remote host

But it works if I delete the line with ProxyCommand from the config.

On both servers, the ssh agent uses a certificate and a teleport key. I don't use static keys. Hostkeys was signed with localhost and 127.0.0.1 in its principals.

What is the reason?