On Wed, 14 Apr 2021, Leon Fauster via CentOS wrote: > On 14.04.21 06:40, Frank Cox wrote: >> >> This doesn't work: >> Host * >> ForwardX11 yes >> host jeff >> ForwardX11 no >> > > IMHO - first win. It should be > > Host jeff > ForwardX11 no > Host * > ForwardX11 yes I think that's right. My ssh config has what amounts to four sections: 1. Directives that should not be overridden, ever 2. Host-specific directives 3. Network-specific directives 4. Fall-through defaults For example: # ===== %< ===== # don't override StrictHostKeyChecking ask # host settings Host dev.my.net prod.my.net ForwardAgent yes ForwardX11 yes ForwardX11Trusted yes # network settings Host *.my.net Compression yes IdentityFile ~/.ssh/id_ed25519 # defaults Host * Compression no ForwardAgent no ForwardX11 no ForwardX11Trusted no Protocol 2 # ===== %< ===== -- Paul Heinlein heinlein at madboa.com 45.38° N, 122.59° W