- tcpkeepalive is spoofable, use ssh own keepalive (timeout is now 10 minutes)

Changed files:
    openssh.conf -> 1.6

diff --git a/openssh.conf b/openssh.conf
index cc1130e3f7900392c09bd16c273048c883263eed..97962fb861d218b3182dd219a14656c1043858e1 100644 (file)
--- a/openssh.conf
+++ b/openssh.conf
@@ -38,3 +38,6 @@ Host *
        ForwardX11 no
        ForwardX11Trusted no
        StrictHostKeyChecking no
+       ServerAliveInterval 60
+       ServerAliveCountMax 10
+       TCPKeepAlive no