<html>
<head>
<style type="text/css">
<!--
body { font-variant: normal; line-height: normal; margin-top: 4px; margin-right: 4px; margin-bottom: 1px; margin-left: 4px }
p { margin-top: 0; margin-bottom: 0 }
-->
</style>
</head>
<body>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">I believe it is just ipfw</font> </p>
<br>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">larkin$ ipfw -h</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">ipfw syntax summary (but please do read the ipfw(8) manpage):</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">ipfw [-acdeftTnNpqS] <command> where <command> is one of:</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">add [num] [set N] [prob x] RULE-BODY</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">{pipe|queue} N config PIPE-BODY</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">[pipe|queue] {zero|delete|show} [N{,N}]</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">set [disable N... enable N...] | move [rule] X to Y | swap X Y | show</font> </p>
<br>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">RULE-BODY:check-state [LOG] | ACTION [LOG] ADDR [OPTION_LIST]</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">ACTION:check-state | allow | count | deny | reject | skipto N |</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">{divert|tee} PORT | forward ADDR | pipe N | queue N</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">ADDR:[ MAC dst src ether_type ] </font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">[ from IPADDR [ PORT ] to IPADDR [ PORTLIST ] ]</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">IPADDR:[not] { any | me | ip/bits{x,y,z} | IPLIST }</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">IPLIST:{ ip | ip/bits | ip:mask }[,IPLIST]</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">OPTION_LIST:OPTION [OPTION_LIST]</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">OPTION:bridged | {dst-ip|src-ip} ADDR | {dst-port|src-port} LIST |</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">estab | frag | {gid|uid} N | icmptypes LIST | in | out | ipid LIST |</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">iplen LIST | ipoptions SPEC | ipprecedence | ipsec | iptos SPEC |</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">ipttl LIST | ipversion VER | keep-state | layer2 | limit ... |</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">mac ... | mac-type LIST | proto LIST | {recv|xmit|via} {IF|IPADDR} |</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">setup | {tcpack|tcpseq|tcpwin} NN | tcpflags SPEC | tcpoptions SPEC |</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<font size="3" face="Lucida Grande">verrevpath</font> </p>
<p style="margin-top: 0; margin-bottom: 0">
<br>
<br>
>>> "Miles Leacy" <miles.leacy@themacadmin.com> 12/10/08 3:34 PM >>><br>Before I exercise my Google-fu, I'm hoping someone can point me at the correct commands to manage the Mac OS X firewall (on OS X Server, if there's a difference) via shell script. </p>
<div content="text/html; charset=UTF-8" http-equiv="Content-Type">
<p style="margin-top: 0; margin-bottom: 0">
<br>
</p>
</div>
<div>
<p style="margin-top: 0; margin-bottom: 0">
Thanks in advance.<br clear="all"><br>----------<br>Miles A. Leacy IV<br><br> Certified System Administrator 10.4<br> Certified Technical Coordinator 10.5<br> Certified Trainer<br>Certified Casper Administrator<br>----------<br>voice: 1-347-277-7321<br><a href="mailto:miles.leacy@themacadmin.com">miles.leacy@themacadmin.com</a><br><a href="http://www.themacadmin.com">www.themacadmin.com</a><br><br><br>
</p>
</div>
</body>
</html>