root@krystal# ipfw show
00010 80 9338 allow ip from any to any via lo0
00015 0 0 check-state
00120 0 0 allow log udp from any to any dst-port 67 out via dc0 keep-state
00200 0 0 allow tcp from any to any dst-port 80 out via dc0 setup keep-state
00220 0 0 allow tcp from any to any dst-port 443 out via dc0 setup keep-state
00230 0 0 allow tcp from any to any dst-port 25 out via dc0 setup keep-state
00231 0 0 allow tcp from any to any dst-port 110 out via dc0 setup keep-state
00240 0 0 allow tcp from me to any out via dc0 setup uid root keep-state
00250 0 0 allow icmp from any to any out via dc0 keep-state
00260 0 0 allow tcp from any to any dst-port 37 out via dc0 setup keep-state
00270 0 0 allow tcp from any to any dst-port 119 out via dc0 setup keep-state
00280 0 0 allow tcp from any to any dst-port 22 out via dc0 setup keep-state
00290 0 0 allow tcp from any to any dst-port 43 out via dc0 setup keep-state
00291 0 0 allow tcp from any to any dst-port 23 out via dc0 keep-state
00292 126 17729 allow udp from any to any dst-port 53 out via dc0 keep-state
00293 76 4521 allow tcp from any to any dst-port 21 in via dc0 keep-state
00294 0 0 allow tcp from any to any dst-port 20 in via dc0
00295 0 0 allow tcp from any to any dst-port 1024 out via dc0
00296 0 0 allow tcp from any to any dst-port 1025 out via dc0
00297 0 0 allow tcp from any 20 to any dst-port 1024-65535 via dc0
00299 1 40 deny log ip from any to any out via dc0
00300 0 0 deny ip from 192.168.0.0/16 to any in via dc0
00301 0 0 deny ip from 172.16.0.0/12 to any in via dc0
00302 0 0 deny ip from 10.0.0.0/8 to any in via dc0
00303 0 0 deny ip from 127.0.0.0/8 to any in via dc0
00304 0 0 deny ip from 0.0.0.0/8 to any in via dc0
00305 0 0 deny ip from 169.254.0.0/16 to any in via dc0
00306 0 0 deny ip from 192.0.2.0/24 to any in via dc0
00307 0 0 deny ip from 204.152.64.0/23 to any in via dc0
00308 0 0 deny ip from 224.0.0.0/3 to any in via dc0
00310 0 0 deny icmp from any to any in via dc0
00315 0 0 deny tcp from any to any dst-port 113 in via dc0
00320 0 0 deny tcp from any to any dst-port 137 in via dc0
00321 0 0 deny tcp from any to any dst-port 138 in via dc0
00322 0 0 deny tcp from any to any dst-port 139 in via dc0
00323 0 0 deny tcp from any to any dst-port 81 in via dc0
00330 0 0 deny ip from any to any frag in via dc0
00332 3569 143480 deny tcp from any to any established in via dc0
00400 0 0 allow tcp from any to me dst-port 80 in via dc0 setup limit src-addr 6
00410 412 47787 allow tcp from any to me dst-port 22 in via dc0 setup limit src-addr 6
00425 0 0 allow tcp from any to any dst-port 53 in via dc0
00430 1 48 allow tcp from any to any dst-port 1024 in via dc0
00431 0 0 allow tcp from any to any dst-port 1025 in via dc0
00432 0 0 allow tcp from any to any dst-port 20 out via dc0
00499 14 2965 deny log ip from any to any in via dc0
00999 0 0 deny log ip from any to any
65535 9 596 deny ip from any to any
root@krystal#