Make sshd listen on the external ip only.
drwxr-xr-x - boot
drwxr-xr-x - etc