$cmd allow log ip from any to $WAN out xmit $WIF

#!/bin/sh
#=======================
cmd="/sbin/ipfw add "
fw="/sbin/ipfw "
WIF="rl1"
LIF="rl0"
WAN="10.83.14.3"
LAN="192.168.0.0/24"
#=======================
$fw -f flush
$fw nat 123 config ip $WAN log
$fw nat 123 config if $WIF same_ports unreg_only redirect_port tcp 192.168.0.10:28575 28575
$cmd nat 123 ip from $LAN to any keep-state
$cmd nat 123 ip from any to $WAN
$cmd allow tcp from me 21 to any
$cmd allow tcp from me 28577 to any
$cmd allow log ip from any to $WAN out xmit $WIF
$cmd allow ip from any to any via lo0
$cmd allow ip from any to any via $LIF
$cmd deny log all from any to any