Beware of this: http://unix.stackexchange.com/a/8886/11172 http://unix.stackexchange.com/a/8886/11172 To fully lock down SSH you have to check PAM config as wel

Beware of this: http://unix.stackexchange.com/a/8886/11172 http://unix.stackexchange.com/a/8886/11172 To fully lock down SSH you have to check PAM config as well. My 2 cents about defending against scripters: * SSH: non-standard port, no passwords, special user-group who is allowed to login. * WWW: redirect everything to https. For some reason bot-attacks dropped from hundreds to none over night. :D