Banning ips for some time?

[Christian Tischler]

Hi,
as I have an DSL line witch is 24/7 online (coming from an big and 
popular provider)  my servers sshd reports 30 to 50 failed 
root/operator/etc. logins a day. I would like to block the incoming ip 
for a few days automaticly after e.g failed login requests.
Currently I am using ipf, but it would be no problem to use any other 
FreeBSD firewall.
This is not only for security reasons, but also to shorten the daily 
security run output :-)

Christian