9.2 ipfw(8)

Òîçè ïðèìåðåí ñêðèïò èçïîëçâà ipfw(8)

#!/bin/sh
cmd="/sbin/ipfw -q add"
out="fxp0" 
real_ip="192.168.0.2" 
jail_ip="192.168.0.13" 
ks="keep-state"
/sbin/ipfw -q -f flush 
$cmd 1000 allow all from any to any via lo0 $ks 

$cmd 1001 allow tcp from me to any 53 out via $out setup $ks
$cmd 1002 allow udp from me to any 53 out via $out $ks
$cmd 1003 allow all from any to me 22 $ks 
$cmd 1004 allow all from $real_ip to any out via $out setup $ks uid root 
$cmd 1005 allow tcp from any to $jail_ip 80 via $out setup $ks 

$cmd 1006 reset all from any to $jail_ip via $out
$cmd 65534 deny log all from any to any