[Prefer]

Я предпочитаю делать так.

/etc/rc.conf

firewall_enable="YES"
firewall_quiet="YES"
firewall_script="/etc/firewallrules"

/etc/firewallrules

#!/bin/sh
# Flush out the list before we begin.
ipfw -f flush

...