Mine
public text v1 · immutable#
#SSH Deny Block. 15 max connection, 5 connection attemptes every 30 seconds.
#
table <bruteforce> persist
#
block quick from <bruteforce>
#
pass in on $ext_if inet proto tcp from any to $ext_if port 22 \
#
flags S/SA keep state \
#
(max-src-conn 15, max-src-conn-rate 5/30, \
#
overload <bruteforce> flush global)