sshguard: fix caveats (pf rule blocking all inbound ssh traffic)

See http://www.sshguard.net/docs/setup/firewall/pf/ for upstream documentation