> What I tend to do (when it works despite bugs in the BT Home Hub firnware)
> is link the incoming port number to the static IP address on my internal
> network
What I do is to run my external SSH daemon configured to accept key-based
logins only.
I run it on port 22. I get *thousands* of attempted logins. But mine are
the only ones that succeed :-)