Absolutely, just sometimes people forget those tools even exist. Of course, you can easily do the same thing with firewall rules as well.

Also, that was a great tidbit about the pam email notification on successful logon. I haven’t seen that one before, thank you!!

If you are going all out, may as well add hosts.deny and hosts.allow.