#
#SSH Deny Block. 15 max connection, 5 connection attemptes every 30 seconds.
#
table <bruteforce> persist
#
block quick from <bruteforce>
#
pass in on $ext_if inet proto tcp from any to $ext_if port 22 \
#
        flags S/SA keep state \
#
        (max-src-conn 15, max-src-conn-rate 5/30, \
#
        overload <bruteforce> flush global)