On Nov 29, 2005, at 2:48 AM, Bruno Schaeffer wrote:
What are you practicing or suggesting?
If those two users have well-defined IP addresses (or ranges) that they
are coming from, deny everything else.
Also, there are some tools out and about that watch logfiles, and throw
up deny rules in real time if a given IP address guesses wrongly more
than N times in a row.
Alternatively, you could run SSH on another port, like 443 or some such.
Aloha mai Nai`a!
--
"Please have your Internet License http://kapu.net/~mjwise/
and Usenet Registration handy..."