Blog-p1-i4

sshd_config

# Minimum authentication required, this should be a no
PermitEmptyPasswords no

# Root has full access to the machine, this is an attackers aim
# refuse ssh access and use sudo from another user account
PermitRootLogin no

# SSH daemon is easy to detect but most attackers assume port 22
# you can change to a non standard port, this will require the
# -p option on the ssh client in order to connect to correct port
Port 5353

# Lock out password authentication, by using public keys you can
# remove the need for passwords and block most attack attempts
# this does require public/private key paid to be made and tested 
# first 
RSAAuthentication yes
PubkeyAuthentication yes
PasswordAuthentication no