Also, please note that currently all forms of network traffic are not supported. This is our local Ethernet network, with a net mask of 255.255.255.0. The 24 means that the first 24 bits of a 32-bit IP are set, thus a netmask of 255.255.255.0. Keep in mind that we could also do this by manipulating the netmask instead of making an entry on a per machine basis. So far, all that's been set up is a simple masquerading firewall using Forwarding rules.
Incoming rules are generally the fastest of the rule types.
Outgoing rules have a big advantage over Incoming and Forwarding rules, but they are slower in comparison of Incoming and Forwarding rules. Outgoing rules can block traffic from any machine on your network, while the others cannot block traffic from the firewall itself. If you want to block traffic to a particular site, but your firewall machine itself is not secured from the individuals in question, they then could access a particular site by going to the firewall machine before going to the particular site. Accounting rules do little other than allow you to monitor network traffic. The current version of ipfwadm will only allow you to measure traffic between two points.