1# $MirSecuCron$ 2# $MirOS: src/usr.bin/ssh/ssh_config,v 1.20 2009/11/24 21:22:18 tg Exp $ 3# $OpenBSD: ssh_config,v 1.25 2009/02/17 01:28:32 djm Exp $ 4 5# This is the ssh client system-wide configuration file. See 6# ssh_config(5) for more information. This file provides defaults for 7# users, and the values can be changed in per-user configuration files 8# or on the command line. 9 10# Configuration data is parsed as follows: 11# 1. command line options 12# 2. user-specific file 13# 3. system-wide file 14# Any configuration value is only changed the first time it is set. 15# Thus, host-specific definitions should be at the beginning of the 16# configuration file, and defaults at the end. 17 18# Site-wide defaults for some ssh_config(5) options. 19 20Host * 21# AddressFamily any 22# BatchMode no 23# BindAddress ... 24# ChallengeResponseAuthentication yes 25# CheckHostIP yes 26# Cipher blowfish 27# Ciphers aes256-ctr,arcfour256,aes256-cbc,cast128-cbc,aes128-cbc,blowfish-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,arcfour128,arcfour,aes192-cbc,aes192-ctr,3des-cbc 28# ClearAllForwardings no 29# Compression no 30# CompressionLevel 6 31# ConnectionAttempts 1 32# ConnectTimeout 0 33# ControlMaster no 34# ControlPath none 35# DynamicForward ... 36# EnableSSHKeysign no 37# EscapeChar ~ 38# ExitOnForwardFailure no 39# ForwardAgent no 40# ForwardX11 no 41# ForwardX11Trusted no 42# GatewayPorts no 43# GlobalKnownHostsFile /etc/ssh/ssh_known_hosts 44# HashKnownHosts no 45# HostKeyAlgorithms ssh-rsa,ssh-dss 46# HostKeyAlias ... 47# HostbasedAuthentication no 48# Hostname ... 49# IdentitiesOnly no 50# IdentityFile ~/.etc/ssh/id_dsa 51# IdentityFile ~/.etc/ssh/id_rsa 52# IdentityFile ~/.etc/ssh/identity 53# KbdInteractiveAuthentication yes 54# KbdInteractiveDevices ... 55# LocalCommand ... 56# LocalForward ... 57# LogLevel INFO 58# MACs umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96 59# NoHostAuthenticationForLocalhost no 60# NumberOfPasswordPrompts 3 61# PasswordAuthentication yes 62# PermitLocalCommand no 63# Port 22 64# PreferredAuthentications hostbased,publickey,keyboard-interactive,password 65# Protocol 2,1 66# ProxyCommand none 67# PubkeyAuthentication yes 68# RekeyLimit ... 69# RemoteForward ... 70# RhostsRSAAuthentication no 71# RSAAuthentication yes 72# SendEnv ... 73# ServerAliveCountMax 3 74 ServerAliveInterval 200 75# SmartcardDevice ... 76# StrictHostKeyChecking ask 77# TCPKeepAlive yes 78# Tunnel no 79# TunnelDevice any:any 80# UsePrivilegedPort no 81# User ... 82# UserKnownHostsFile ~/.etc/ssh/known_hosts 83# VerifyHostKeyDNS no 84# VisualHostKey no 85# XAuthLocation /usr/X11R6/bin/xauth 86 87 88# Add this for session multiplexing (replace 1000 with 89# your UID) at the bottom of the ~/.etc/ssh/config file: 90 91# Host * 92# ControlPath /var/run/ssh-agent/1000/ctl.%r@%h:%p 93