From owner-freebsd-questions@FreeBSD.ORG  Tue Nov  4 20:31:17 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id EDD0D6B0
 for <freebsd-questions@freebsd.org>; Tue,  4 Nov 2014 20:31:17 +0000 (UTC)
Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com
 [66.111.4.26])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id C1261AC4
 for <freebsd-questions@freebsd.org>; Tue,  4 Nov 2014 20:31:17 +0000 (UTC)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41])
 by mailout.nyi.internal (Postfix) with ESMTP id 6060620A87
 for <freebsd-questions@freebsd.org>; Tue,  4 Nov 2014 15:31:16 -0500 (EST)
Received: from web3 ([10.202.2.213])
 by compute1.internal (MEProxy); Tue, 04 Nov 2014 15:31:16 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=
 messagingengine.com; h=message-id:x-sasl-enc:from:to
 :mime-version:content-transfer-encoding:content-type:in-reply-to
 :references:subject:date; s=smtpout; bh=FNEH0xVTihMX/dsOAbDI4p7G
 UMk=; b=QnjYtzSXxPR02/sdSzHUqnwoxMFyigHlhYbHHTqFXB/jkCv634RGQ+Vc
 4CxIxIeEE8THXHXZbjgtnOhF5Rer6S/Oc8SkxouE/VZw+tMKYS8xBOqsAA1r78La
 Nkk5flZC5A8/xwRVC9+4g9sd37kKfpnsALWCL1aoZ1QslkS8ufo=
Received: by web3.nyi.internal (Postfix, from userid 99)
 id 4221910D575; Tue,  4 Nov 2014 15:31:16 -0500 (EST)
Message-Id: <1415133076.3101293.187068781.08AE26B5@webmail.messagingengine.com>
X-Sasl-Enc: vhS4VRT7JrJFPyU6k9PvYgyYyx+i4GsRR9M0lahXUQxE 1415133076
From: Mark Felder <feld@FreeBSD.org>
To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain
X-Mailer: MessagingEngine.com Webmail Interface - ajax-c51dec4f
In-Reply-To: <20141102154444.GA42429@ymer.thorshammare.org>
References: <20141102154444.GA42429@ymer.thorshammare.org>
Subject: Re: sshguard pf
Date: Tue, 04 Nov 2014 14:31:16 -0600
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Nov 2014 20:31:18 -0000

You could always enable 2 Factor Auth for SSH and then they'll
definitely have no chance of getting in :-)

http://blog.feld.me/posts/2014/07/ssh-two-factor-authentication-on-freebsd/


Good luck!