#!/bin/sh
ipfw -q -f flush

if="em0"
cmd="ipfw -q add"
ks="keep-state"

$cmd allow all from any to any via lo0

$cmd check-state
$cmd deny all from any to any via $if frag
$cmd deny tcp from any to any established
$cmd allow tcp from any to me 222 in via $if setup limit src-addr 5
$cmd allow tcp from any to me ftp via $if setup limit src-addr 5
$cmd allow log tcp from any to any 25 via $if setup $ks
$cmd allow tcp from any to me 80 in via $if setup limit src-addr 100
$cmd allow tcp from 195.70.62.113 to me 4949 in setup limit src-addr 1
#$cmd allow icmp from any to me in via $if
$cmd deny all from any to any in via $if