Bug 3239

Summary:	sshd_config(5) DisableForwarding keword is permitted (and has effect) in match blocks
Product:	Portable OpenSSH	Reporter:	Fredrik Eriksson <mindrot.org>
Component:	sshd	Assignee:	Assigned to nobody <unassigned-bugs>
Status:	CLOSED FIXED
Severity:	trivial	CC:	djm
Priority:	P5
Version:	8.4p1
Hardware:	All
OS:	All
Bug Depends on:
Bug Blocks:	3217

Description Fredrik Eriksson 2020-12-11 03:13:16 AEDT

In the sshd_config man page DisableForwarding isn't listed as a valid keyword in a match block, but I've found that it is needed if DisableForwarding is set in the main configuration and you want to override it for specific match blocks.

I haven't verified that it has the effect I want (enable/disable forwarding for the specific match block, as compared to overriding the global DisableForwarding setting for everything), but either way it should be documented.

Comment 1 Damien Miller 2021-01-08 13:23:03 AEDT

thanks - I have committed a fix and it should be in the next release

Comment 2 Damien Miller 2021-03-04 09:53:24 AEDT

close bugs that were resolved in OpenSSH 8.5 release cycle