gateway_enable question

[David Banning]

> #>ipfw add <open rule number> deny ip from any to any via <dev facing lan

but this would stop the win boxes from access the unix box via the 
network, would it not?

ipfw would be great - my main problem is that I want to block the
win boxes from using messenger which tries any and all ports,  but
I don't want to block my x-win (xwin32) terminal connection to unix
from each win box - which -also- seems to want to pick it's own port
every time it runs.
--