> Could somebody help in figuring out why PF configuration meant to prevent > brutal SSH attacks doesn't work. Check your pflog. The ruleset itself seems fine (if it is complete and you did not forget to post a vital part). We also can assume that pf is enabled, can we?