Tried to do as in an example and no any errors now:
Code:
pass in on $ext_if proto tcp from any to any port 22 keep state (max-src-conn-rate 2/60, overload <bad_hosts> flush global)
So, I used several options in parentheses. But what if I do not want to use any additional options? Why the first variant does not work?