iptables rules to combat a brute-force ssh attack.

Assumes actual users will not repeatedly open new
connections on a prod box; configured rate is three
new ssh conns per hour, upon third the connection
is 'tarpit'ted.  Requires xtables extension targets.