On Linux, I can use "ipfw enable firewall" from the terminal to
start ipfw. However, that doesn't seem work on OSX. I can't find a
startup item or launch plist for it. I must be going crazy. How
does one stop/start ipfw on OSX client?
You probably want:
/usr/sbin/sysctl -w net.inet.ip.fw.enable=1
On OS X client, the firewall is started at boot time by /usr/libexec/
FirewallTool, which has no man page and is run directly from /etc/rc
if /Library/Preferences/com.apple.sharing.firewall.plist exists.