#!/bin/sh

fwcmd="/sbin/ipfw -q"

oif="rl0"
iif="xl0"
server="172.17.0.2"
inside="172.17.0.2/24"

${fwcmd} disable one_pass

${fwcmd} -f flush

$fwcmd add 00080 allow ip from any to any via lo0
$fwcmd add 00081 deny ip from any to 127.0.0.0/8
$fwcmd add 00082 deny log ip from 127.0.0.0/8 to any

#NATD
$fwcmd add 00090 divert 8668 ip from any to 192.168.4.2/32 in
$fwcmd add 00091 divert 8668 ip from 172.17.0.2/24 to any out

#$fwcmd add 00100 deny log all from any 135-139,445 to any
#$fwcmd add 00101 deny log all from any to any 135-139,445

#Limitando a velocidade de down e up do rede 192.168.10 toda. (todos os ips vao ter upload de 64 e download de 128.
$fwcmd pipe 1 config bw 64Kbps mask src-ip 0x000000ff queue 5.4
$fwcmd pipe 2 config bw 128Kbps mask dst-ip 0x000000ff queue 10.6

#Definindo os pipes para a rede.
$fwcmd add 000300 pipe 1 all from 172.17.0.0/24 to any in layer2
$fwcmd add 000301 pipe 2 all from any to 172.17.0.0/24 out layer2

#Definindo quem pode trafegar ( IP X MAC )
## 172.17.0.10
$fwcmd add 00400 allow all from any to 172.17.0.10 MAC 00:11:f5:0d:09:17 any layer2
$fwcmd add 00401 allow all from 172.17.0.10 to any MAC any 00:11:f5:0d:09:17 layer2

#fechando tudo
$fwcmd add 65000 deny all from any to any layer2 in via xl0