Oliver Ransom wrote on Fri, 21 Aug 2009 11:12:35 +0930:
As an additional question to the above, would forcing users to log in with SSH keys rather than passwords avoid requiring any anti brute force attack measures to be put in place?
Regarding SHH: yes. Nevertheless, you will want to handle these with rate -limiting, to avoid overflowing the logs and to protect your ressources.
Kai