Скрипт nofire.pl взяв з прикладів.
скрипт файервола:
#!/bin/sh -
f='/sbin/ipfw'
ifOut='sk0'
ipfw -f flush
ipfw -f pipe flush
${f} add 50 allow tcp from any to me 22
${f} add 51 allow tcp from me 22 to any
${f} add 100 allow ip from any to any via lo0
${f} add 150 allow ip from me to any keep-state
${f} add 160 skipto 500 ip from any to me
${f} add 200 divert natd ip from any to any via ${ifOut}
${f} add 210 allow ip from any to any out
${f} add 300 allow ip from "table(0)" to any
${f} add 390 deny ip from any to any
${f} add 500 check-state
${f} add 510 skipto 700 ip from any to any via ${ifOut}
${f} add 520 allow icmp from any to any
${f} add 530 allow udp from any to any 53,7723
${f} add 540 allow tcp from any to any 80,443
${f} add 590 deny ip from any to any
${f} add 700 divert natd ip from any to any
${f} add 710 allow icmp from any to me
${f} add 720 deny ip from any to me
${f} add 730 allow ip from any to "table(0)"
${f} add 790 deny ip from any to any
nofire.txt