#!/bin/sh
#
# Firewall
#
cmd="/sbin/ipfw add"
/sbin/ipfw -f flush

# Basic Settings
$cmd 001 check-state
$cmd 002 pass all from any to any via lo0
$cmd 003 deny all from any to 127.0.0.0/8
$cmd 004 deny ip from 127.0.0.0/8 to any

# Allow Ports (100)
$cmd 101 pass tcp from any to any established
$cmd 102 pass tcp from any to any 21 keep-state
$cmd 103 pass tcp from any to any 22 keep-state
$cmd 104 pass tcp from any to any 22 keep-state
$cmd 105 pass tcp from any to any 25 keep-state
$cmd 106 pass tcp from any to any 37 keep-state
$cmd 107 pass tcp from any to any 43 keep-state
$cmd 108 pass all from any to any 53 keep-state
$cmd 109 pass tcp from any to any 80 keep-state
$cmd 110 pass tcp from any to any 110 keep-state
$cmd 111 pass tcp from any to any 143 keep-state
$cmd 112 pass tcp from any to any 443 keep-state
$cmd 113 pass tcp from any to any 465 keep-state
$cmd 114 pass tcp from any to any 783 keep-state
$cmd 115 pass tcp from any to any 873 keep-state
$cmd 116 pass tcp from any to any 993 keep-state
$cmd 117 pass tcp from any to any 995 keep-state
$cmd 118 pass tcp from any to any 2082 keep-state
$cmd 119 pass tcp from any to any 2083 keep-state
$cmd 120 pass tcp from any to any 2086 keep-state
$cmd 121 pass tcp from any to any 2087 keep-state
$cmd 122 pass tcp from any to any 2089 keep-state
$cmd 123 pass tcp from any to any 2095 keep-state
$cmd 124 pass tcp from any to any 2096 keep-state
$cmd 125 pass tcp from any to any 3306 keep-state

# Misc Settings (200)
$cmd 201 pass tcp from any 20 to any 1024-65535 keep-state
$cmd 202 pass tcp from any to any 65000-65500 keep-state
$cmd 203 pass icmp from any to any icmptypes 8 keep-state