Покажи ipfw list в момент когда кто-то авторизован
bill# ipfw list00050 allow tcp from any to me dst-port 22
00051 allow tcp from me 22 to any
00110 allow ip from any to any via lo0
00120 skipto 1000 ip from me to any
00130 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00160 skipto 2000 ip from any to me
00200 skipto 500 ip from any to any via em0
00300 skipto 4500 ip from any to any in
00400 skipto 450 ip from any to any recv em0
00420 divert 1 ip from any to any
00450 divert 2 ip from any to any
00490 allow ip from any to any
00500 skipto 32500 ip from any to any in
00510 divert 1 ip from any to any
00540 allow ip from any to any
01000 allow udp from any 53,7723 to any
01010 allow tcp from any to any setup keep-state
01020 allow udp from any to any keep-state
01100 allow ip from any to any
02000 check-state
02010 allow icmp from any to any
02020 allow tcp from any to any dst-port 80,443
02050 deny ip from any to any via em0
02060 allow udp from any to any dst-port 53,7723
02100 deny ip from any to any
05000 deny ip from not table(0) to any
05001 skipto 5010 ip from table(127) to table(126)
05002 skipto 5030 ip from any to not table(2)
05003 deny ip from any to not table(1)
05004 pipe tablearg ip from table(21) to any
05005 deny ip from any to any
05010 pipe tablearg ip from table(127) to any
05030 deny tcp from table(15) to any dst-port 25
05150 allow ip from table(51) to table(50)
05160 allow ip from table(61) to table(60)
05400 pipe tablearg ip from table(11) to any
32000 deny ip from any to any
32000 deny ip from any to any
32490 deny ip from any to any
33000 pipe tablearg ip from table(126) to table(127)
33001 skipto 33010 ip from not table(2) to any
33002 pipe tablearg ip from any to table(20)
33003 deny ip from any to any
33150 allow ip from table(50) to table(51)
33160 allow ip from table(60) to table(61)
33400 pipe tablearg ip from any to table(10)
65535 deny ip from any to any
bill# ipfw -a list00050 102 9020 allow tcp from any to me dst-port 22
00051 106 14704 allow tcp from me 22 to any
00110 1822 113066 allow ip from any to any via lo0
00120 14173 4126409 skipto 1000 ip from me to any
00130 0 0 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00160 15298 1974789 skipto 2000 ip from any to me
00200 121 12399 skipto 500 ip from any to any via em0
00300 121 12399 skipto 4500 ip from any to any in
00400 0 0 skipto 450 ip from any to any recv em0
00420 0 0 divert 1 ip from any to any
00450 0 0 divert 2 ip from any to any
00490 0 0 allow ip from any to any
00500 121 12399 skipto 32500 ip from any to any in
00510 0 0 divert 1 ip from any to any
00540 0 0 allow ip from any to any
01000 31 1899 allow udp from any 53,7723 to any
01010 0 0 allow tcp from any to any setup keep-state
01020 18 1901 allow udp from any to any keep-state
01100 14133 4123907 allow ip from any to any
02000 0 0 check-state
02010 1462 87816 allow icmp from any to any
02020 13713 1880569 allow tcp from any to any dst-port 80,443
02050 0 0 deny ip from any to any via em0
02060 114 5106 allow udp from any to any dst-port 53,7723
02100 0 0 deny ip from any to any
05000 35 4924 deny ip from not table(0) to any
05001 0 0 skipto 5010 ip from table(127) to table(126)
05002 43 3966 skipto 5030 ip from any to not table(2)
05003 0 0 deny ip from any to not table(1)
05004 0 0 pipe tablearg ip from table(21) to any
05005 0 0 deny ip from any to any
05010 0 0 pipe tablearg ip from table(127) to any
05030 0 0 deny tcp from table(15) to any dst-port 25
05150 0 0 allow ip from table(51) to table(50)
05160 0 0 allow ip from table(61) to table(60)
05400 43 3966 pipe tablearg ip from table(11) to any
32000 0 0 deny ip from any to any
32000 0 0 deny ip from any to any
32490 3 234 deny ip from any to any
33000 0 0 pipe tablearg ip from table(126) to table(127)
33001 23 3988 skipto 33010 ip from not table(2) to any
33002 0 0 pipe tablearg ip from any to table(20)
33003 55 4902 deny ip from any to any
33150 0 0 allow ip from table(50) to table(51)
33160 0 0 allow ip from table(60) to table(61)
33400 0 0 pipe tablearg ip from any to table(10)
65535 31 5058 deny ip from any to any