[root@ /]# ipfw list
00010 allow ip from any to any via lo0
00015 check-state
00051 deny ip from 204.17.109.26 to me in via vr0
00052 deny ip from 206.18.177.26 to me in via vr0
00053 deny ip from 88.101.160.70 to me in via vr0
00053 deny ip from 204.127.225.26 to me in via vr0
00054 deny ip from 206.18.177.26 to me in via vr0
00055 deny ip from 88.139.169.89 to me in via vr0
00110 allow tcp from any to any dst-port 53 out via vr0 keep-state
00111 allow udp from any to any dst-port 53 out via vr0 keep-state
00200 allow tcp from any to any dst-port 80 out via vr0 setup keep-state
00220 allow tcp from any to any dst-port 443 out via vr0 setup keep-state
00230 allow tcp from any to any dst-port 25 out via vr0 setup keep-state
00231 allow tcp from any to any dst-port 110 out via vr0 setup keep-state
00232 allow tcp from me 53 to any out via vr0
00240 allow tcp from me to any out via vr0 setup uid root keep-state
00250 allow icmp from any to any out via vr0 keep-state
00280 allow tcp from any to any dst-port 22 out via vr0 setup keep-state
00301 deny ip from 172.16.0.0/12 to any in via vr0
00302 deny ip from 10.0.0.0/8 to any in via vr0
00303 deny ip from 127.0.0.0/8 to any in via vr0
00304 deny ip from 0.0.0.0/8 to any in via vr0
00305 deny ip from 169.254.0.0/16 to any in via vr0
00307 deny ip from 204.152.64.0/23 to any in via vr0
00308 deny ip from 224.0.0.0/3 to any in via vr0
00310 deny icmp from any to any in via vr0
00315 deny tcp from any to any dst-port 113 in via vr0
00320 deny tcp from any to any dst-port 137 in via vr0
00321 deny tcp from any to any dst-port 138 in via vr0
00322 deny tcp from any to any dst-port 139 in via vr0
00323 deny tcp from any to any dst-port 81 in via vr0
00330 deny ip from any to any frag in via vr0
00332 deny tcp from any to any established in via vr0
00400 allow tcp from any to me dst-port 80 in via vr0 setup limit src-addr 2
00410 allow tcp from any to me dst-port 22 in via vr0 setup limit src-addr 2
00420 allow tcp from any to me dst-port 23 in via vr0 setup limit src-addr 2
00430 allow tcp from me 53 to any in via vr0
00440 allow udp from me 53 to any in via vr0
00450 allow tcp from any to me dst-port 25 in via vr0 setup limit src-addr 2
00452 allow tcp from 192.168.1.111 to me dst-port 25 in via vr0 setup limit src-addr 2
00452 allow tcp from any to me dst-port 110 in via vr0 setup limit src-addr 2
00456 allow tcp from any to me dst-port 8000 in via vr0 setup limit src-addr 2
00999 deny log ip from any to any
65535 deny ip from any to any
[root@ /]# ipfw add 00456 allow tcp from any to me dst-port 8001 in via vr0 setup limit src-addr 2