sshd_config revision 69591 
1# This is ssh server systemwide configuration file.
2#
3# $FreeBSD: head/crypto/openssh/sshd_config 69591 2000-12-05 02:55:12Z green $
4
5Port 22
6#Protocol 2,1
7#ListenAddress 0.0.0.0
8#ListenAddress ::
9HostKey /etc/ssh/ssh_host_key
10HostDsaKey /etc/ssh/ssh_host_dsa_key
11ServerKeyBits 768
12LoginGraceTime 120
13KeyRegenerationInterval 3600
14PermitRootLogin no
15# Deprecated: rate-limit sshd connections to 5 connections per 10 seconds
16# ConnectionsPerPeriod 5/10
17
18# After 10 unauthenticated connections, refuse 30% of the new ones, and
19# refuse any more than 60 total.
20MaxStartups 10:30:60
21# Don't read ~/.rhosts and ~/.shosts files
22IgnoreRhosts yes
23# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
24#IgnoreUserKnownHosts yes
25StrictModes yes
26X11Forwarding yes
27X11DisplayOffset 10
28PrintMotd yes
29KeepAlive yes
30
31# Logging
32SyslogFacility AUTH
33LogLevel INFO
34#obsoletes QuietMode and FascistLogging
35
36RhostsAuthentication no
37#
38# For this to work you will also need host keys in /etc/ssh_known_hosts
39RhostsRSAAuthentication no
40#
41RSAAuthentication yes
42
43# To disable tunneled clear text passwords, change to no here!
44PasswordAuthentication yes
45PermitEmptyPasswords no
46# Uncomment to disable s/key passwords 
47#SkeyAuthentication no
48#KbdInteractiveAuthentication yes
49
50# To change Kerberos options
51#KerberosAuthentication no
52#KerberosOrLocalPasswd yes
53#AFSTokenPassing no
54#KerberosTicketCleanup no
55
56# Kerberos TGT Passing does only work with the AFS kaserver
57#KerberosTgtPassing yes
58
59CheckMail yes
60#UseLogin no
61
62# Uncomment if you want to enable sftp
63#Subsystem	sftp	/usr/libexec/sftp-server
64