> [...] dictionary attacks via SSH [...] Don't listen at port 22? Since I stopped port-forwarding port 22, I see approximately none of these. I don't see adding "-p xxxx" to a command as a hardship. If you want strangers to use it, then you would need to publish the actual port number someplace, of course, but I would expect the robots not to read much.