# Sane defaults echo 'Compression yes' >> /etc/ssh/ssh_config echo 'AddressFamily inet' >> /etc/ssh/ssh_config echo 'HashKnownHosts no' >> /etc/ssh/ssh_config echo 'ServerAliveInterval 120' >> /etc/ssh/ssh_config echo 'UseDNS no' >> /etc/ssh/sshd_config # Paranoid, use on public facing servers #echo 'PermitRootLogin no' >> /etc/ssh/sshd_config #echo 'PasswordAuthentication no' >> /etc/ssh/sshd_config # Anti Paranoid, useful when dealing with lots of new boxes echo 'StrictHostKeyChecking no' >> /etc/ssh/ssh_config