# ControlMaster to work.
ControlPath ~/.ssh/master-%l-%h-%p-%r
+# Abort if not all requested port forwardings can be set up.
+ ExitOnForwardFailure yes
+
# Don't send any environment variables.
SendEnv
+# Check host IP in known_hosts when connecting to detect DNS spoofing.
+ CheckHostIP yes
# Ask before adding any host keys to ~/.ssh/known_hosts.
StrictHostKeyChecking ask