Give the SSH blocker its own IPtables chain.