break-in attempt in my machine

[Chris Green]

My defence is simply that of only allowing ssh logins from two
specific IPs.  I allow logins from my TsoHost hosting (where I have
ssh access) and from another system 'out there' where I have ssh
access. 

Both 'intermediate' systems have strong passwords and so does my
system at home.

Using a ProxyCommand in the .ssh/config makes the login fairly
painless, one just enters one password after the other.

Thus most of the defending against ssh attempts on port 22 is exported
to systems where it's their bread and butter to handle the problem.

-- 
Chris Green