IPFilter

IPFilter (commonly referred to as ipf) is an <a href="/facts/Open-source_software/HzTaB8E9">open-source software</a> package that provides <a href="/facts/Firewall_(computing)/Et2RkJaU">firewall</a> services and <a href="/facts/Network_address_translation/nFweFNfN">network address translation</a> (NAT) for many <a href="/facts/Unix-like/YAKrAxzd">Unix-like</a> operating systems. The author and software maintainer is Darren Reed. IPFilter supports both IPv4 and IPv6 protocols, and is a <a href="/facts/Stateful_firewall/eCIseahN">stateful firewall</a>.
IPFilter is delivered with <a href="/facts/FreeBSD/RKsFTm7F">FreeBSD</a>, <a href="/facts/NetBSD/PTm5HWls">NetBSD</a>, <a href="/facts/Solaris_(operating_system)/KPfT98EJ">Solaris 10 through 11.3</a>, <a href="/facts/Illumos/helcbXv6">illumos</a> (<a href="/facts/OpenIndiana/o2wuXlcm">OpenIndiana</a>) and <a href="/facts/HP-UX/hIvLDdJF">HP-UX</a>. It used to be a part of <a href="/facts/OpenBSD/xmPS9tek">OpenBSD</a>, but it was removed by <a href="/facts/Theo_de_Raadt/306adTJA">Theo de Raadt</a> in May 2001 due to problems with its license. It was subsequently replaced in OpenBSD by <a href="/facts/PF_(firewall)/pc1fgj4Y">PF</a>, which was developed by OpenBSD's own developers. <a href="/facts/DragonFly_BSD/U6cvpDJR">DragonFly BSD</a> removed its support for IPFilter in May 2011. <a href="/facts/Oracle_Solaris/KPfT98EJ">Oracle Solaris</a> imported the PF firewall from OpenBSD in the 11.3 release, and removed IPFilter in the 11.4 release. 
IPFilter can be installed as a runtime-<a href="/facts/Loadable_kernel_module/UXvHsj2c">loadable kernel module</a> or directly incorporated into the operating system <a href="/facts/Kernel_(operating_system)/uEj4U3Rz">kernel</a>, depending on the specifics of each kernel and user preferences. The software's documentation recommends the module approach, if possible.

IPFilter open-in-new

IPFilter