From: martin f. krafft Date: Tue, 14 May 2019 00:40:50 +0000 (+0200) Subject: disable X11 forwarding by default X-Git-Url: https://git.madduck.net/etc/ssh.git/commitdiff_plain/8d51476c133f351e874ad61d74f0efbe06ac1c0b?ds=sidebyside disable X11 forwarding by default --- diff --git a/.ssh/config.in b/.ssh/config.in index c7af6e0..537b3bf 100644 --- a/.ssh/config.in +++ b/.ssh/config.in @@ -111,7 +111,6 @@ Host clegg.lehel.madduck.net | clegg.lehel | clegg Host albatross.lehel.madduck.net | albatross.lehel | albatross Hostname albatross.lehel.madduck.net - ForwardX11 yes HostKeyAlias albatross.lehel Host albatross-luks Hostname albatross.lehel.madduck.net @@ -140,12 +139,10 @@ Host embryo.gauting.madduck.net | embryo Host mother.gauting | mother | mother.gauting.madduck.net Hostname mother.gauting - ForwardX11 yes Host mothere Hostname embryo.gauting.madduck.net Port 22021 CheckHostIP no - ForwardX11 yes HostKeyAlias mother.gauting.madduck.net Host visitor*.lehel.madduck.net | visitor*.lehel @@ -173,19 +170,14 @@ Host julia-via-wall | rjulia Host jugband.mtvic.madduck.net | jugband.mtvic | jugband Hostname jugband.mtvic.madduck.net -Host lelina.mtvic.madduck.net | lelina.mtvic | lelina - ForwardX11 yes - ### ROAD WARRIORS Host fishbowl.* CheckHostIP no - ForwardX11 yes HostKeyAlias fishbowl Host fishbowl | fishbowl.rw.madduck.net CheckHostIP no - ForwardX11 yes HostKeyAlias fishbowl ProxyCommand bash -c "TARGETS=$( (TRIES=%h.{mtvic,lehel,gauting,rw}.madduck.net; eval fping -aAC1 -t500 $TRIES 2>&1 & eval fping6 -aAC1 -t500 $TRIES 2>&1; wait) | sed -rne 's, : ([[:digit:]]), @\1,p' | sort -t@ -k2n | sed -ne 's, .*,,p' | tr '\n' ','); echo Targets: \$TARGETS using \${TARGETS%%%%,*} … >&2; exec nc -vq0 \${TARGETS%%%%,*} %p" @@ -211,10 +203,6 @@ Host tethered-sgs7e ### LOCAL VIRT HOSTS -Host wafer.virt - RemoteForward 25000 localhost:25 - ForwardX11 yes - Host red | green | blue | yellow | black | white | orange | violet | wafer CanonicalDomains virt CanonicalizeHostname yes