I am working through the security guide from apple (which they did not update since Snow Leopard). In the firewall section it states that ipfw has a default allow rule:

65535 allow ip from any to any

And if you enable the firewalls 'stealth mode' via the settings the following rule should be added:

33300 deny icmp from any to me in icmptypes 8

The funny thing is: I have stealth enabled and I do not see this rule when doing

sudo ipfw print

Any idea where stealth mode is enforced if not in the ipfw ruleset?