ch# cat setfilter
#!/bin/sh
fwcmd="/sbin/ipfw"
tcpports="22,2221,5190,2041,110,25,3389,443,465,995,2802"

if [ $7 = "0.0.0.0/32" ];
then
    cmd="echo bad ip $7"
else
    cmd1="${fwcmd} $1 $2 $3 $4 $5 $6 $7 $8 $9 dst-port ${tcpports} out xmit vlan111"
    cmd2="${fwcmd} $1 $2 $3 $4 icmp $6 $7 $8 $9 out xmit vlan111"
fi
echo "${cmd1}" >> /tmp/ipfw.log
echo "${cmd2}" >> /tmp/ipfw.log
${cmd1}
${cmd2}