Whoever wrote:

> How about looking at IPTABLES/NETFILTER to control access to sshd?

I have something like
-A INPUT -p tcp -m tcp --dport 22 -m limit --limit 1/minute --limit-burst 3
-j ACCEPT

This prevented a lot of break-in attempts.

But maybe there is a better rule...