non-root users can do "ipfw list block". shouldn't that return -EPERM ? i really don't like the users look at my firewall-tables o:-)
/herp