IPFilter

ipf

Developer(s)	Darren Reed
Stable release	5.1.1 / January 30, 2012
Repository	[cvs://[email protected]:/cvsroot/ipfilter cvs://[email protected]:/cvsroot/ipfilter]
Operating system	FreeBSD, NetBSD, Solaris, Linux, HP-UX, ...
Type	Packet filtering
License	IPFilter
Website	coombs.anu.edu.au/~avalon/

IPFilter (commonly referred to as ipf) is an open source software package that provides firewall services and network address translation (NAT) for many UNIX-like operating systems. The author and software maintainer is Darren Reed. IPFilter supports both IPv4 and IPv6 protocols, and is a stateful firewall.

IPFilter is delivered with FreeBSD, NetBSD, Solaris 10 & 11. The current source code that can be accessed via sourceforge is covered by GPLv2.

IPFilter can be installed as a runtime-loadable kernel module or directly incorporated into the operating system kernel, depending on the specifics of each kernel and user preferences. The software's documentation recommends the module approach, if possible.

Operating systems that are known to support IPFilter include the following:

• AIX 5.3 ML05
• BSD/OS-1.1 – 4
• DragonFlyBSD 1.0–2.10
• FreeBSD 2.0.0–9.0
• IRIX 6.2, 6.5
• HP-UX 11.00
• Linux kernel 2.4–2.6
• NetBSD 1.0–6.0
• OpenBSD 2.0–2.9 (no support since May 2001)
• OpenSolaris
• QNX 6 port
• Solaris 2.3–11
• SunOS 4.1.3–4.1.4
• Tru64 5.1a
• UnixWare 7.1.4 (MP2 and above)

See also

• iptables
• ipfw
• NPF (firewall)
• PF (firewall)

External links

• IPFilter Homepage
• IPFilter Source Code
• The IPFilter FAQ by Phil Dibowitz
• IPFilter How-To
• FreeBSD handbook – The IPFILTER (IPF) Firewall