diff --git a/ssh/config b/ssh/config
new file mode 100644
index 0000000..ea73d12
--- /dev/null
+++ b/ssh/config
@@ -0,0 +1,9 @@
+
+Host github.com
+    User git
+    IdentityFile /root/ssh/id_ed25519
+    IdentitiesOnly yes
+    StrictHostKeyChecking yes
+
+Host *
+    ProxyCommand /home/devuser/ssh-blocker.sh %h %p
diff --git a/ssh/ssh_blocker.sh b/ssh/ssh_blocker.sh
new file mode 100644
index 0000000..3968c24
--- /dev/null
+++ b/ssh/ssh_blocker.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+echo "❌ SSH access to $1:$2 is blocked by company policy."
+exit 1