Для IPFW есть такой набо правил:
#!/bin/sh -

ipfw='/sbin/ipfw -q'
ournet1='192.168.0.0/24'# лвс1
ournet2='192.168.2.0/24'# лвс2
uprefix1='192.168.0'
uprefix2='192.168.2'
ifout='rl0'# смотрит в инет
ifuser1='rl1'# лвс1
ifuser2='rl2'# лвс2

${ipfw} flush

${ipfw} add 100 check-state

${ipfw} add 200 deny log icmp from any to any in icmptype 5,9,13,14,15,16,17
${ipfw} add 210 reject ip from ${ournet1} to any in via ${ifout}
${ipfw} add 215 reject ip from ${ournet2} to any in via ${ifout}

${ipfw} add 300 allow ip from any to any via lo0
${ipfw} add 310 allow tcp from me to any keep-state via ${ifout}
${ipfw} add 320 allow icmp from any to any
${ipfw} add 330 allow udp from me to any domain keep-state
#${ipfw} add 340 allow udp from any to me domain
${ipfw} add 350 allow ip from me to any

#${ipfw} add 400 allow tcp from any to me http,https,ssh
#${ipfw} add 410 allow tcp from not ${ournet1} to me smtp
#${ipfw} add 415 allow tcp from not ${ournet2} to me smtp

${ipfw} add 500 fwd 192.168.0.1,3128 tcp from ${ournet1} to any http out via ${ifout}
${ipfw} add 505 fwd 192.168.0.1,3128 tcp from ${ournet2} to any http out via ${ifout}
${ipfw} add 510 divert natd all from ${ournet1} to any out via ${ifout}
${ipfw} add 515 divert natd all from ${ournet2} to any out via ${ifout}
${ipfw} add 520 divert natd all from any to 192.168.1.35 in via ${ifout}

${ipfw} add 1002 allow ip from ${uprefix1}.2 to any via ${ifuser1}
${ipfw} add 1002 allow ip from any to ${uprefix1}.2 via ${ifuser1}

Проблема в том, что часть сайтов открывается, а часть нет даже rambler.ru не открывается. И не работает закачка файлов, где засада, подскажите пожалуйста?
Спасибо!