My strategy for years has been to run SSH on port 22, visible only to hosts inside my local network via a firewall (iptables) rule. Connecting on port 22 is no

My strategy for years has been to run SSH on port 22, visible only to hosts inside my local network via a firewall (iptables) rule. Connecting on port 22 is not allowed from the outside. SSH also listens on port 2222 and can be connected to from the outside, root logins are not permitted. Works great.