Like Netfilter and ipfilter on other platforms, OpenBSD users love PF, their firewall tool. It handles network address translation, normalizing TCP/IP traffic, providing bandwidth control, and packet prioritization. It also offers some eccentric features, such as passive OS detection. Coming from the same guys who created OpenBSD, you can trust that it has been well audited and coded to avoid the sort of security holes we have seen in otherpacketfilters.
For downloads and more information,
visit the OpenBSD PF homepage.
This tool is pure awesomeness! I enjoyed writing rules for it and seeing the messages flash by. I saw the bits, I saw the bytes and I saw the bitbytes and knew they were good. Now I'm gonna review iptables :)
Along with your rating, you can use the comment form to post a review,
tutorial, tips and tricks, or anything else others will find useful.
If you develop this software (or work for the company), please don't rate it. You may leave a clarifying comment as long as you state your affiliation and don't specify a star rating (just leave it as “No rating”).