ListenAddress 0.0.0.0:22
LogLevel INFO
LoginGraceTime 120
-MaxAuthTries 3
+MaxAuthTries 5
PasswordAuthentication no
PermitEmptyPasswords no
PermitRootLogin yes
RhostsRSAAuthentication no
ServerKeyBits 768
StrictModes yes
-Subsystem sftp /usr/lib/openssh/sftp-server
SyslogFacility AUTH
TCPKeepAlive yes
UsePAM yes
UsePrivilegeSeparation yes
X11DisplayOffset 10
X11Forwarding no
+
+Subsystem sftp internal-sftp
+Match Group sftp
+ AllowTCPForwarding no
+ ChrootDirectory %h
+ ForceCommand internal-sftp
+ X11Forwarding no