sshd_config, since Debian and RedHat set X11Forwarding to yes instead of default, do the same so people aren't surprised.