On Sun, 2010-04-25 at 06:50 -0700, Craig White wrote:
The only scenarios where you don't need something like denyhosts are where only publickey authentication is allowed (no passwords) or the system is not connected to the Internet and cannot be accessed by untrusted users.
Or, to be pedantic, when you don't have any services... ;-)