how to drop ssh-attacks in SuSEfirewall2?

Subject is the question. I have been trying to use the ipt_recent module, but if i insert rules in /etc/sysconfig/scripts/SuSEfirewall-custom it does not work. Problem is possibly the order in which rules are processed, I guess iptables does not reach my rules and has accepted traffic before hitting them. I tried putting my rules in all locations in the -custom file, to no avail. -- L. de Braal BraHa Systems NL - Terneuzen T +31 115 649333 F +31 115 649444