Bug 3239 - sshd_config(5) DisableForwarding keword is permitted (and has effect) in match blocks
Summary: sshd_config(5) DisableForwarding keword is permitted (and has effect) in matc...
Status: CLOSED FIXED
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: sshd (show other bugs)
Version: 8.4p1
Hardware: All All
: P5 trivial
Assignee: Assigned to nobody
URL:
Keywords:
Depends on:
Blocks: V_8_5
  Show dependency tree / graph
 
Reported: 2020-12-11 03:13 AEDT by Fredrik Eriksson
Modified: 2021-03-04 09:53 AEDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Fredrik Eriksson 2020-12-11 03:13:16 AEDT 
In the sshd_config man page DisableForwarding isn't listed as a valid keyword in a match block, but I've found that it is needed if DisableForwarding is set in the main configuration and you want to override it for specific match blocks.

I haven't verified that it has the effect I want (enable/disable forwarding for the specific match block, as compared to overriding the global DisableForwarding setting for everything), but either way it should be documented.
Comment 1 Damien Miller 2021-01-08 13:23:03 AEDT 
thanks - I have committed a fix and it should be in the next release
Comment 2 Damien Miller 2021-03-04 09:53:24 AEDT 
close bugs that were resolved in OpenSSH 8.5 release cycle