rc.firewall

ipfw -q -f flush inif="rl0" outif="rl1" ipfw="ipfw -q add" ks="keep-state" #$ipfw deny all from 192.168.1.120 to any in via $inif $ipfw allow all from any to 192.168.1.243 in via $inif $ipfw allow all from 192.168.1.243 to any out via $inif $ipfw allow all from any to any via lo0 $ipfw divert natd all from any to any via $outif $ipfw check-state $ipfw allow all from any to any in via $inif $ks $ipfw allow all from any to any out via $outif $ks $ipfw allow tcp from any to me 22,888 in via $outif $ks $ipfw 65534 deny log all from any to any