All the distros I've used lately don't allow ssh connections by default, I have to explicitly
enable sshd.
I don't bother with the overhead of iptables rules, I simply define a restrictive set of IPs
allowed to connect to sshd, via hosts.allow, and pare down the list of allowed ssh users, via
sshd_config, to the one or two who actually have a need to do so. For more security, I disable
password logins and require ssh keys to log in.
Every morning the syslog is full of new entries chronicling unsuccessful ssh login attempts.
Haha, suckers - knock yourself out!