- release 3.1

[packages/openssh.git] / openssh.conf

diff --git a/openssh.conf b/openssh.conf
index e0ee7a324c97861ef81ef979857a630ffaf31667..f627da23fa542e500e91a29fb04b2f9f96875d8f 100644 (file)
--- a/openssh.conf
+++ b/openssh.conf
@@ -1,6 +1,7 @@
-# This is ssh client systemwide configuration file.  This file provides 
-# defaults for users, and the values can be changed in per-user configuration
-# files or on the command line.
+# This is the ssh client system-wide configuration file.  See
+# ssh_config(5) for more information.  This file provides defaults for
+# users, and the values can be changed in per-user configuration files
+# or on the command line.
 
 # Configuration data is parsed as follows:
 #  1. command line options
@@ -13,20 +14,26 @@
 # Site-wide defaults for various options
 
 # Host *
-#   ForwardAgent yes
-#   ForwardX11 yes
-#   RhostsAuthentication yes
-#   RhostsRSAAuthentication yes
+#   ForwardAgent no
+#   ForwardX11 no
+#   RhostsAuthentication no
+#   RhostsRSAAuthentication no
 #   RSAAuthentication yes
-#   TISAuthentication no
 #   PasswordAuthentication yes
-#   FallBackToRsh yes
-#   UseRsh no
 #   BatchMode no
-#   StrictHostKeyChecking no
+#   CheckHostIP yes
+#   StrictHostKeyChecking ask
 #   IdentityFile ~/.ssh/identity
+#   IdentityFile ~/.ssh/id_rsa
+#   IdentityFile ~/.ssh/id_dsa
 #   Port 22
-    Cipher blowfish
+#   Protocol 2,1
 #   Cipher 3des
+#   Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
 #   EscapeChar ~
 
+# Be paranoid by default
+Host *
+       ForwardAgent no
+       ForwardX11 no
+       StrictHostKeyChecking no