>If you're not restricting access to SSH using a firewall, then you're a bigger idiot than I thought you were. I'm not sure name calling is really appropriate

>If you're not restricting access to SSH using a firewall, then you're a bigger idiot than I thought you were. I'm not sure name calling is really appropriate here. Yes, firewalling stuff is certainly appropriate, particularly administrative things, but key based auth is pretty secure, firewall or no. You're also nitpicking on a single point when he mentions other things that are definitely not usually firewalled. Your mail and web servers are generally open to the world, regardless of whether or not SSH is.