> You need "options IPFIREWALL" too. > Seems you don't have IPFIREWALL compiled into kernel. > Look into `grep ipfw2 /var/run/dmesg.boot` # grep ipfw2 /var/run/dmesg.boot ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding disabled, default to deny, logging disabled randy