I am working through the security guide from apple (which they did not update since Snow Leopard). In the firewall section it states that ipfw has a default allow rule:
65535 allow ip from any to any
And if you enable the firewalls 'stealth mode' via the settings the following rule should be added:
33300 deny icmp from any to me in icmptypes 8
The funny thing is: I have stealth enabled and I do not see this rule when doing
sudo ipfw print
Any idea where stealth mode is enforced if not in the ipfw ruleset?