table <id439E4021.2> { FWexternIP , FWinternIP }


pass in quick inet proto tcp from yourIP to <id439E4021.2> port 22 modulate state label "RULE -1 -- ACCEPT "

I am assuming you have already done tables? pfctl can and does do tables. You should put these two lines first.

That will never deny access from that IP. The <id439E4021.2> is an arbitrary number. It could have been <id11111111.1> or <1fishingtime>

I am not sure about it severing connections and making them re-connect. Though, I have never heard of it doing that.

SELECT * FROM scog WHERE ethics > 0;

0 rows returned.