try to make setxkb work at startup (still problems), include better sshd config, some new packages, e.g. shorewall