On Wed, 14 Apr 2021, Leon Fauster via CentOS wrote:
On 14.04.21 06:40, Frank Cox wrote:
This doesn't work: Host * ForwardX11 yes host jeff ForwardX11 no
IMHO - first win. It should be
Host jeff ForwardX11 no Host * ForwardX11 yes
I think that's right. My ssh config has what amounts to four sections:
1. Directives that should not be overridden, ever 2. Host-specific directives 3. Network-specific directives 4. Fall-through defaults
For example:
# ===== %< ===== # don't override StrictHostKeyChecking ask
# host settings Host dev.my.net prod.my.net ForwardAgent yes ForwardX11 yes ForwardX11Trusted yes
# network settings Host *.my.net Compression yes IdentityFile ~/.ssh/id_ed25519
# defaults Host * Compression no ForwardAgent no ForwardX11 no ForwardX11Trusted no Protocol 2 # ===== %< =====