root@krystal# ipfw show 00010 80 9338 allow ip from any to any via lo0 00015 0 0 check-state 00120 0 0 allow log udp from any to any dst-port 67 out via dc0 keep-state 00200 0 0 allow tcp from any to any dst-port 80 out via dc0 setup keep-state 00220 0 0 allow tcp from any to any dst-port 443 out via dc0 setup keep-state 00230 0 0 allow tcp from any to any dst-port 25 out via dc0 setup keep-state 00231 0 0 allow tcp from any to any dst-port 110 out via dc0 setup keep-state 00240 0 0 allow tcp from me to any out via dc0 setup uid root keep-state 00250 0 0 allow icmp from any to any out via dc0 keep-state 00260 0 0 allow tcp from any to any dst-port 37 out via dc0 setup keep-state 00270 0 0 allow tcp from any to any dst-port 119 out via dc0 setup keep-state 00280 0 0 allow tcp from any to any dst-port 22 out via dc0 setup keep-state 00290 0 0 allow tcp from any to any dst-port 43 out via dc0 setup keep-state 00291 0 0 allow tcp from any to any dst-port 23 out via dc0 keep-state 00292 126 17729 allow udp from any to any dst-port 53 out via dc0 keep-state 00293 76 4521 allow tcp from any to any dst-port 21 in via dc0 keep-state 00294 0 0 allow tcp from any to any dst-port 20 in via dc0 00295 0 0 allow tcp from any to any dst-port 1024 out via dc0 00296 0 0 allow tcp from any to any dst-port 1025 out via dc0 00297 0 0 allow tcp from any 20 to any dst-port 1024-65535 via dc0 00299 1 40 deny log ip from any to any out via dc0 00300 0 0 deny ip from 192.168.0.0/16 to any in via dc0 00301 0 0 deny ip from 172.16.0.0/12 to any in via dc0 00302 0 0 deny ip from 10.0.0.0/8 to any in via dc0 00303 0 0 deny ip from 127.0.0.0/8 to any in via dc0 00304 0 0 deny ip from 0.0.0.0/8 to any in via dc0 00305 0 0 deny ip from 169.254.0.0/16 to any in via dc0 00306 0 0 deny ip from 192.0.2.0/24 to any in via dc0 00307 0 0 deny ip from 204.152.64.0/23 to any in via dc0 00308 0 0 deny ip from 224.0.0.0/3 to any in via dc0 00310 0 0 deny icmp from any to any in via dc0 00315 0 0 deny tcp from any to any dst-port 113 in via dc0 00320 0 0 deny tcp from any to any dst-port 137 in via dc0 00321 0 0 deny tcp from any to any dst-port 138 in via dc0 00322 0 0 deny tcp from any to any dst-port 139 in via dc0 00323 0 0 deny tcp from any to any dst-port 81 in via dc0 00330 0 0 deny ip from any to any frag in via dc0 00332 3569 143480 deny tcp from any to any established in via dc0 00400 0 0 allow tcp from any to me dst-port 80 in via dc0 setup limit src-addr 6 00410 412 47787 allow tcp from any to me dst-port 22 in via dc0 setup limit src-addr 6 00425 0 0 allow tcp from any to any dst-port 53 in via dc0 00430 1 48 allow tcp from any to any dst-port 1024 in via dc0 00431 0 0 allow tcp from any to any dst-port 1025 in via dc0 00432 0 0 allow tcp from any to any dst-port 20 out via dc0 00499 14 2965 deny log ip from any to any in via dc0 00999 0 0 deny log ip from any to any 65535 9 596 deny ip from any to any root@krystal#