Ipfirewall

ipfirewall or ipfw is a FreeBSD IP packet filter and traffic accounting facility. Its ruleset logic is similar to many other packet filters except IPFilter. ipfirewall is authored and maintained by FreeBSD volunteer staff members. Its syntax enables use of sophisticated filtering capabilities and thus enables professional users to satisfy advanced requirements. It can either be used as a loadable kernel module or incorporated into the kernel; use as a loadable kernel module where possible is highly recommended. ipfw is the built-in firewall of Mac OS X [ipfw is the only firewall software in Mac OS X v10.4 and below. Mac OS X v10.5 uses both an application firewall and ipfw. [http://support.apple.com/kb/HT1810 Apple Knowledge Base #HT1810] ] and DragonFly BSD. Like FreeBSD, ipfirewall is open source. It is used in many FreeBSD based firewall products, including m0n0wall.

Wipfw is a version of IPFW that runs on Windows.

ipfirewall is composed of these components:
*kernel firewall filter rule processor and its integrated packet accounting facility
*logging facility
*"divert" rule (NAT)
*advanced special purpose facilities
*the dummynet traffic shaper
*"fwd rule" forward facility
*the bridge facility
*ipstealth
*per-packet kernel-wide tagging (set, unset and check 16-bit tags)
*ALTQ-based QoS disciplines
*rule sets for atomic management of multiple rules
*a full-blown stateful engine with connection limiting
*anti-spoofing rules based on routing table
*lookup tables based on Radix trees
*per-rule byte and packet counters
*built-in NAT, Port address translation and LSNAT (load-sharing) facilities (since FreeBSD 7)
*IPv6 support (with several limitations)

See also

*ipchains, a Linux-based descendant of ipfw
*netfilter/iptables, a Linux-based descendant of ipchains
*PF (firewall), another widely deployed BSD firewall solution

References

External links

* [http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html section on ipfw] in the FreeBSD Handbook.
* [http://www.freebsd-howto.com/HOWTO/Ipfw-HOWTO Ipfw-HOWTO]
* [http://wipfw.sourceforge.net/ IPFirewall for Windows] Version of IPFirewall for Microsoft Windows
* [http://www.freebsd.org/cgi/man.cgi?query=ipfw&sektion=4 ipfw(4)] , [http://www.freebsd.org/cgi/man.cgi?query=ipfw&sektion=8 ipfw(8)] , [http://www.freebsd.org/cgi/man.cgi?query=divert&sektion=4 divert(4)] , [http://www.freebsd.org/cgi/man.cgi?query=altq&sektion=4 altq(4)] , [http://www.freebsd.org/cgi/man.cgi?query=dummynet&sektion=4 dummynet(4)] - ipfw-related FreeBSD manpages
* [http://www.hanynet.com/waterroof/ WaterRoof] - a free OS X GUI configuration application for ipfw