ssh_config: Use GatewayPorts no.

diff --git a/ssh_config b/ssh_config
index 31c8e6d915282f023369fd7261aaec082d3829fe..6a2d79a29296e6642b86c58967cfd8d6f1ba4ac5 100644 (file)
--- a/ssh_config
+++ b/ssh_config
@@ -48,6 +48,9 @@ Host *
     PasswordAuthentication yes
     PubkeyAuthentication yes
 
+# Bind local forwardings to loopback only. This way no remote hosts can access
+# them (default).
+    GatewayPorts no
 # Abort if not all requested port forwardings can be set up.
     ExitOnForwardFailure yes