Make sshd listen on the external ip only.