Elad Efrat wrote:
> last but not least, about blocking ssh brute force attacks: I would
> recommend not doing any sort of automatic log parsing on the server end.

Could you elaborate on that a bit?  

Seems to me shutting down attacks is useful.  Better is to not allow
passwords at all, but that's not always feasible.  

--jkl