SSH IP blocking?

[Bart Silverstrim]

Kent Borg wrote:
> Keith Clark wrote:
>> Is there a way to block ip addresses from attempting ssh
>> connections?  I noticed in my auth.log a few people trying to gain
>> access over and over again and would like to stop them.
> 
> Be careful of automatically banning IP addresses, you might lock 
> yourself out.  

Unless you don't know where you're going to be logging in from, you can 
whitelist your IPs.  A positive and a negative feature, I suppose.

>Be careful of permanently banning addresses, you might
>  lockout something your don't want to lock out.

Denyhosts lets you specify a lifetime for the banned IP.