Mark Smith wrote:
Would it be possible to make these rules a bit more general, such that they'd automatically cover things like IPsec, HIP or any other current (e.g. ssh) or future protocols that are authenticated, without nominating the protocols specifically?
There are many ssh servers with default or poorly chosen passwords, so that might not be a good idea.