>I don't know the IP addresses of the SSH servers on the Internet.

Then only allow to the SSH servers you know/want?  You can go either way... 
block all and allow only certain IPs
Or allow all, and block certain IPs
On 2.0 you can block by OS type too...

Reply via email to