ipfw -q -f flush
inif="ale0"
outif="ale0"
ipfw="ipfw -q add"
ks="keep-state"
$ipfw allow all from any to any via $inif
$ipfw allow all from any to any via lo0
$ipfw divert natd all from any to any via $outif
$ipfw check-state
$ipfw allow all from me to any out via $outif $ks
$ipfw 65534 deny log all from any to any