From: Dave Harrison [mailto:[EMAIL PROTECTED]
> My current solution is to run a second sshd on another port and have > that be the externally accessible sshd (and configure it to only allow > public key connections). However the way sshd logs, I can't work out > what was logged by which daemon. I like dtucker's suggestion better, but you could also set one of your sshd instances to log to a different facility in syslog and then write its logs to a different file. Also, could you not run both instances on the same (default) port by binding them individually to different unique interfaces? ListenAddress a.b.c.d:22 SyslogFacility AUTH --------- ListenAddress w.x.y.z:22 SyslogFacility LOCAL0 DS