1)Limit SSH logins to specific users 2)Get a proper /etc/sudoers 3)Use IP tables to limit SSH connections to trusted IP's/networks. Setup a port knock if you

1)Limit SSH logins to specific users 2)Get a proper /etc/sudoers 3)Use IP tables to limit SSH connections to trusted IP's/networks. Setup a port knock if you roam around a lot. 4)Read your daily logwatch 5)Turn off ports/services that are not in use (this is somewhat less necessary with a halfway decent iptables setup) 6)Use SSH keys instead of passwords! 7)Log to a syslog server that is highly secured as well 8)Run a nessus scan on your box regularly 9)Minimize how much specific information about your underlying OS various services display