For anyone wanting to try out ipfw3, there’s now a rc script.  Make sure to set up a rules file, or you’ll kill all incoming traffic.