We had one IP attempting to get in for quite a while (194.55.159.7) last night. Probably not worth blocking in the packet filter. If a pattern shows up I'll consider blocking IP ranges.
Look for sshmonitor recently posted to alt.sources. Useful as a template for your needs.
dp
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
