>>20292169 (pb)

Firewall: block all access to the telnet port (port 23). Telnet does not encrypt anything - user ID's and passwords are sent in clear text.

Configure ssh to not accept passwords by disabling PAM. Only clients with an authorized key will be able to get in.

HTH