公司网关简单防火墙...

ipfw -q -f flush inif="ale0" outif="ale0" ipfw="ipfw -q add" ks="keep-state" $ipfw allow all from any to any via $inif $ipfw allow all from any to any via lo0 $ipfw divert natd all from any to any via $outif $ipfw check-state $ipfw allow all from me to any out via $outif $ks $ipfw 65534 deny log all from any to any