# Turn things off for stovetop - it chokes on them
Host stovetop stovetop.astro.princeton.edu
  ForwardAgent no
  ForwardX11 no
  ForwardX11Trusted no

# Floyd only supports protocol 1
Host floyd floyd.astro.princeton.edu
  Protocol 1
  ForwardAgent no
  ForwardX11 no
  ForwardX11Trusted no

# xanadu-vm's keys change, let's try to avoid errors
Host xanadu-vm xanadu-vm.astro.princeton.edu
  StrictHostKeyChecking no
  ForwardAgent yes
  ForwardX11 yes
  ForwardX11Trusted yes

# Allow everything for CSES, astro, and home hosts w/ FQDN
Host cses*.princeton.edu *.astro.princeton.edu *.srhuston.net
  ForwardAgent yes
  ForwardX11 yes
  ForwardX11Trusted yes

# Deny everything for other hosts w/ a dot
Host *.*
  ForwardAgent no
  ForwardX11 no
  ForwardX11Trusted no

# Now allow for anything else - if we're typing a single hostname, it's likely
# trusted.
Host *
  ForwardAgent yes
  ForwardX11 yes
  ForwardX11Trusted yes