sshguard: fix caveats (pf rule blocking all inbound ssh traffic)

Closes #28327.

Signed-off-by: Adam Vandenberg <flangy@gmail.com>