Comment by chunk_waffle

For SSH I prefer blocklistd[0], which sadly is only available on FreeBSD and NetBSD AFAIK, it's a much simpler approach though requires a small patch to any daemons that want support.

[0] https://youtu.be/fuuf8G28mjs?si=UhuRVndacryMim_a