> 2] in /etc/hosts.allow limit access to sshd accordingly (sshd: <WORKPLACE IP>);
I'm prepared to be wrong here but, aren't the hosts.* configs just for inetd / xinetd and (possibly) portmap? And, IIRC, ssh installs as an init script on debian?