Extended firewall rules

[Beacon]

How to set advanced firewall rules for virtual machine?
For example:
iptables -A input -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 3 --rttl --name ssh --rsource -j DROP
iptables -A input -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set --name ssh --rsource -j ACCEPT
iptables -A input -p tcp -m tcp --dport 22 -j ACCEPT