As usual, I’m finding this super late but the Debian package “molly-guard” is amazing.
A lot of my SSH sessions are initiated from Windows which means I’m using Kitty (a fork of Putty). SSH sessions are fairly obvious when you’re using Windows but what if you’re using Linux or OS X? It’s so easy to confuse a remote session for a local session even if you use fancy prompts.
I have a web server, a home server, and a Raspberry Pi all of which have molly-guard installed to keep me from screwing something up. This is a no-brainer for the amateur and seasoned system administrator.