1. 7
    1. 2

      Sucks, but apparently this is good enough in evading those blocks:

      $ipfw -q add deny all from $i to any in via $if ipttl 57-64 proto tcp tcpflags rst src-port 443

      (Assuming the actual hops are not with in 57-64 TTL)