$ipfw add allow all from any to any established # Keep the existing connections
This rule seems to be totally useless since you doesn't have any dynamic rules (no keep-state/check-state/setup/limit modifiers).
$ipfw add drop all from any to me
If you haven't got other interfaces than em0
, it's also useless - you have done "allowed from any to me" via interfaces before.
P.S. Just for information - you can use "//" syntax for adding comment directly after rule, so that they will be viewed on
# ipfw show