On Wednesday 26 March 2008 07:31, Kai Schaetzl wrote: > > The idea of only allowing for strict ip address is good but what if you > > are on the move? > > If you have a static IP address, this is not a problem. You VPN into your > home LAN and from there to the restricted machine. If you are going to use VPN then why not setup your remote site to use VPN and bypass SSH altogether then? We could go on for day here with the arguments and counter-arguments. The point is everyone is going to do what they find best for them. What works for one might not for another. Bottom line is if you want to be secure don't use passwords for login. If you must then make them as hard to crack as possible. The problem with this is people will tend to write them down if they are too hard to remember. -- Regards Robert Smile... it increases your face value! Linux User #296285 http://counter.li.org