On 18 Apr 2008, at 14:27, Tony Arnold wrote: <snip> > Oh, and if you are allowing ssh, then consider running fail2ban or > denyhosts to stop dictionary attacks via ssh, which are very common. Or only allow key based logins and disable password logins, renders dictionary attacks useless although doesn't stop the CPU burn when people come a knocking. Regards Huw