Robin Hahling volunteered to update OpenSSH in DragonFly, which is good news. It’s a jump from version 6.1 to 6.7, so there’s some feature changes. tcpwrappers support is gone, for instance. If you have a reason to object to this change, speak up now.
A running description of activity related to DragonFly BSD.
Denyhosts uses tcpwrappers and fail2ban CAN use but doesn’t default to tcpwrapper, however I’m not sure if fail2ban ever works out of the box on DragonFly due to confusion for it on the firewall, I’d have to test.