{
    "description": "Allow limited incoming SSH access (TCP/22)",
    "filter": [
        {
            "in": "internet",
            "out": "_fw",
            "service": "ssh",
            "action": "accept",
	        "conn-limit": { "count": 3, "interval": 30 }
        }
    ]
}