IMHO it would be a nice addition to include sshguard in the installation or create an extension to protect services exposed to the internet of brute force attacks.
Sshguard
- is dependency free
works with several firewalls incl. IPFW
is usable with IPv6
can read logs inside jails
poetl
