firewall/nat question: simple, but no example found

[Chuck Swiger]

Tetsuji "Maverick" Rai wrote:
[ ... ]
> I want to set up a firewall/nat so that
> 
> 1. The gateway (also a web server) accepts tcp port 80 and (probably) 25
> from outside. but incoming tcp/udp ports 1-1024,1043,10000 connections
> are blocked.
> 2. Inside private network, nothing is blocked.
> 
> Isn't it so simple?

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-natd.html
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html

-- 
-Chuck