On Fri, 2011-06-24 at 11:12 +0100, Avi Greenbury wrote: > Making it easy for someone to get in because once they're in they can't > do much is not the right way to do it for most values of 'it'. Excellent point! As an additional precaution, I disabled by default the "reverseuser" account. I enable it only on request, when needed.