ipfw规则.

why119

ipfw add allow tcp from any to any 80 in via em0 tcpflags rst

allow从重试...这样写对不.

HonestQiao

tcpflags spec
             TCP packets only.        Match if the TCP header contains the comma
             separated list of flags specified in spec.  The supported TCP
             flags are:

             fin, syn, rst, psh, ack and urg.  The absence of a particular
             flag may be denoted with a `!'.  A rule which contains a tcpflags
             specification can never match a fragmented packet which has a
             non-zero offset.  See the frag option for details on matching
             fragmented packets.