Also, move sshd to a random &amp; rarely-used TCP port. Won&#x27;t help much against a skilled &amp; determined targeted attack, however the &quot;security through obscurity&quot; is not entirely worthless. Using something other than 22 is quite effective at avoiding spray-n-pray scans and exploits.<p>For extra credit, set up port knocking.