IPFilter

From Wikipedia, the free encyclopedia

ipf
Developed by	Darren Reed
Latest release	4.1.23 / January 20, 2007
OS	FreeBSD, NetBSD, OpenBSD, Solaris, Linux, HP-UX, ...
Genre	Packet filtering
License	IPF-own licensing
Website	http://coombs.anu.edu.au/~avalon/ip-filter.html

IPFilter (commonly referred to as ipf) is a software package that can be used to provide network address translation (NAT) or firewall services. It can either be used as a loadable kernel module (LKM) or incorporated into the Unix kernel; use as a loadable kernel module where possible is highly recommended. Scripts are provided to install and patch system files, as required. The author and maintainer is Darren Reed.

IPFilter comes as a part of FreeBSD, NetBSD and Solaris 10. It used to be a part of OpenBSD, but it was removed in May 2001 due to problems with the license of IP Filter, after negotiations between Theo de Raadt and Reed broke down. At first glance, the license looks a lot like BSD Licenses, but does not allow redistribution of modified versions.

Operating systems that IPFilter is known to work with are listed below.