But I wish there was an easier way to add someone to one of my pf tables when they start banging on the door, trying ssh accounts that don't exist or hitting the server repeatedly. I'm using refuseconnection:1800s, but there are a few people who just keep coming back for more, every 30 minutes. For now, I think I'll probably end up with an awk script to add their ip addresses to my "gropers" table.