@mk @sazius meh. editing the sshd_config on the #NAS works (the changes stick, even after modifying the port via the web UI) - but the 'AllowUsers' line I added is *not* accepted. So I cannot login as another user, and thus *must* login as root even though I want to forbid that. :( So, my only 'extra' security for SSH is the non-standard port. #nothappy