#!/bin/sh

/sbin/ipfw -q -f flush		# Delete all rules
cmd="/sbin/ipfw -q add "	# build rule prefix
ks="keep-state"			# too lazy to type this each time
#
# State checks :
$cmd 00100 allow ip from any to any via lo0
$cmd 00100 check-state
$cmd 00100 allow tcp from any to any established
$cmd 00100 allow all from any to any out $ks
# 
# Deny from any host in table(1)
$cmd 00150 deny ip from "table(1)" to me
#
# Allow FTP :
$cmd 00200 allow tcp from any to me 20 setup $ks
$cmd 00300 allow tcp from any to me 21 setup $ks
#
# Allow SSH :
$cmd 00400 allow tcp from any to me 22 setup $ks
#
# Allow HTTP and HTTPS :
$cmd 00500 allow tcp from any to me 80 setup $ks
$cmd 00600 allow tcp from any to me 443 setup $ks
#
# Allow BNC : 
$cmd 00700 allow tcp from any to me 2204 setup $ks