[ Thanks to dave for
this link. ]
“SSH is a great way to remotely administer a server. However, it
still has a number of issues when you open it up to the world. The
server and client communications are secure but that
doesn’t mean the hosts involved are. Opening an
SSH service to the world allows for brute force attacks and means
that the carbon interface is still the weakest link.“There are some very simple steps you can take to really harden
remote access over SSH, especially if you can’t
simply tie the service down to a limited number of source
ports…”