
Note, however, that port forwarding can also be used to tunnel traffic from the external Internet into a corporate intranet. For instructions on configuring port forwarding, see the port forwarding configuration page. Local and remote port forwarding can be used for tunneling applications, accessing intranet web services from home, tunneling database access, and many other purposes. ForwardAgent yes ForwardX11 yes Port forwarding There is generally no reason to enable them on production servers in enterprises. However, they increase the risk of an attack spreading from a compromised server to a user's desktop, so the most security-critical environments may want to leave them disabled. Setting these options in /etc/ssh/ssh_config makes life easier for end users, saves overhead, and reduces support load.
#Ssh config editor password
These allow running graphical applications remotely and eliminate the need for typing a password whenever moving from one server to another, respectively. Enabling X11 forwarding and agent forwardingĭevelopers, students, and researchers often want to enable X11 forwarding and SSH agent forwarding.

In most cases, just /etc/ssh/ssh_config is edited. In practice, only a few of them are ever changed, and user-specific configuration files are rarely used. There are many configuration options available. Contents Commonly used configuration options Enabling X11 forwarding and agent forwarding Port forwarding Configuring public key authentication Certificate-based authentication Format of SSH client config file ssh_config Listing of client configuration options Commonly used configuration options
