question about ssh

[James McKenzie]

Ed Wilts wrote:
> On Thu, Dec 30, 2004 at 09:19:35PM +0800, chi wrote:

> My recommended approach would be to block *all* incoming connections to
> sshd via either /etc/hosts.deny or via iptables.  Then, add only those
> hosts or subnets who you know need incoming access.  In my case, I allow
> incoming access from my office subnet and from a trusted colleague but
> everybody else is blocked.  

Example iptables lines please?

I think the idea of using port 2222 is a better one.

James McKenzie