Nice article. I use the default set of rules, but restricted to certain IPs for ssh, and a high numebered port in the router pointing to the ssh port in my mac.
OK. In "Writing the ipfw Log Lines to a Different File" you edit /etc/syslogd.conf.
My mac with 10.3.8 does not have that file, but it does have /etc/syslog.conf which has lines that define where to log things, such as
Should we create /etc/syslogd.conf or use /etc/syslog.conf instead? And if we have to create it, which permissions should we use?