# Delete all rules
/sbin/ipfwadm -I -f
# Set default policy deny
/sbin/ipfwadm -I -p deny
# Allow telnets
/sbin/ipfwadm -I -a accept -P tcp -S0.0.0.0/0 \
   1024:65535 -D
[ ....]
# Last rule: match failed attempts so we can
# log the entries
/sbin/ipfwadm -I -a deny -P all -S0.0.0.0/0 -D0.0.0.0/0 -o