There still is the ip address that comes across. I see no problem with direct root login. Just use a very secure password. This is assuming it is a internal box. External box setup with account other than root then su to root This is my 2cents -----Original Message----- From: Mario Platt <mplatt@xxxxxxxxx> Sent: Monday, June 02, 2008 11:35 AM To: Ron Arts <ron@xxxxxxxxxxxxxx> Cc: secureshell@xxxxxxxxxxxxxxxxx Subject: Re: Allowing remote root login seems to be bad. Why? Hey, Well in my opinion, debian guys are right, and for one reason only: Logging