firewall.conf
!/bin/sh
# netflow stats
/usr/local/sbin/softflowd -i em2 -n 192.168.56.93:42111
# firewall command
FwCMD="/sbin/ipfw"
${FwCMD} -f flush
# Networks define
${FwCMD} table all flush
${FwCMD} table 2 add 172.16.0.0/22
${FwCMD} table 3 add 172.16.3.0/24
${FwCMD} table 4 add 172.16.4.0/24
${FwCMD} table 5 add 172.16.5.0/24
${FwCMD} table 6 add 172.16.6.0/24
#${FwCMD} table 9 add DHCP/32
${FwCMD} table 9 add 192.168.56.0/24
${FwCMD} add 2 deny udp from any to any 139
#NAT
${FwCMD} nat 1 config log if em1.3 reset same_ports
${FwCMD} add 6000 nat 1 ip from