diff --git a/config/jail.conf b/config/jail.conf
index 7f1e40b5..e940b7ef 100644
--- a/config/jail.conf
+++ b/config/jail.conf
@@ -421,3 +421,9 @@ enabled = false
 filter = sshd
 action = osx-ipfw
 logpath = /var/log/secure.log
+
+[ssh-apf]
+enabled = true
+filter  = sshd
+action  = apf[name=SSH]
+logpath = /var/log/secure