kldload ipfw
ipfw -q add 65000 allow all from any to any
ipfw add 1100 deny ip from any to 192.168.0.0/16 gid shell
ipfw add 900 allow ip from any to 192.168.1.4
ipfw add 900 allow ip from any to 192.168.1.254
ipfw add 800 deny all from any to 192.168.1.254 80 gid shell
ipfw add 700 deny all from any to 192.168.1.254 23 gid shell