Comment Re: SSH over VPN, Fail2Ban, DenyHost and RBL's (Score 1) 391
I don't open SSH to the outside and only use it over an encrypted tunnel. Fail2ban and DenyHost are your friend layered with RBL's and snort. Works decent against web attacks too!