version 1.90, 2008/05/08 12:21:16 |
version 1.91, 2008/06/10 03:57:27 |
|
|
set in the global section of the config file, until either another |
set in the global section of the config file, until either another |
.Cm Match |
.Cm Match |
line or the end of the file. |
line or the end of the file. |
|
.Pp |
The arguments to |
The arguments to |
.Cm Match |
.Cm Match |
are one or more criteria-pattern pairs. |
are one or more criteria-pattern pairs. |
|
|
.Cm Host , |
.Cm Host , |
and |
and |
.Cm Address . |
.Cm Address . |
|
The match patterns may consist of single entries or comma-separated |
|
lists and may use the wildcard and negation operators described in the |
|
.Sx SSH_KNOWN_HOSTS FILE FORMAT |
|
section of |
|
.Xr sshd 8 . |
|
.Pp |
|
The patterns in an |
|
.Cm Address |
|
criteria may additionally contain addresses to match in CIDR |
|
address/masklen format, e.g. |
|
.Dq 192.0.2.0/24 |
|
or |
|
.Dq 3ffe:ffff::/32 . |
|
Note that the mask length provided must be consistent with the address - |
|
it is an error to specify a mask length that is too long for the address |
|
or one with bits set in this host portion of the address. For example, |
|
.Dq 192.0.2.0/33 |
|
and |
|
.Dq 192.0.2.0/8 |
|
respectively. |
|
.Pp |
Only a subset of keywords may be used on the lines following a |
Only a subset of keywords may be used on the lines following a |
.Cm Match |
.Cm Match |
keyword. |
keyword. |