IPFW
man.freebsd.org
Spec sheet
- Purpose
- ipfw is the user interface for controlling the FreeBSD firewall, dummynet traffic shaper and packet scheduler, and in-kernel NAT services.Read 11 Oct 2026 · man.freebsd.org
- Supported platforms
- FreeBSDRead 22 Sep 2026 · man.freebsd.org
- Free plan
- YesRead 22 Sep 2026 · man.freebsd.org
- Availability
- FreeBSD is available free of charge with source code.Read 11 Oct 2026 · freebsd.org
- Configuration files
- Rules may be read from a file and optionally piped through a preprocessor such as cpp or m4.Read 11 Oct 2026 · man.freebsd.org
- Connection alerts
- YesRead 22 Sep 2026 · man.freebsd.org
- Filtering
- Rules can filter on IPv4 and IPv6 protocols, addresses and ports, direction, interfaces, IP and TCP header fields, and other packet attributes.Read 11 Oct 2026 · man.freebsd.org
- Logging
- Matching packets can be logged to syslog, the ipfw0 pseudo-interface, or a routing socket.Read 11 Oct 2026 · man.freebsd.org
- NAT
- The utility supports in-kernel NAT and stateful or stateless IPv6/IPv4 translation, including NAT64 and CLAT.Read 11 Oct 2026 · man.freebsd.org
- Operational caution
- The manual warns that a mismatch between the userland world and kernel can break the ipfw ABI and prevent adding rules, potentially affecting booting.Read 11 Oct 2026 · man.freebsd.org
- Outbound control
- advancedRead 22 Sep 2026 · man.freebsd.org
- Platform
- IPFW is documented as a FreeBSD system utility; the FreeBSD project provides images for supported architectures and cloud vendors.Read 11 Oct 2026 · man.freebsd.org
- Project
- FreeBSD is developed and maintained by a large community.Read 11 Oct 2026 · freebsd.org
- Rule direction
- bothRead 22 Sep 2026 · man.freebsd.org
- Rule management
- Rules can be organized into 32 sets that can be enabled, disabled, swapped, or moved for ruleset manipulation.Read 11 Oct 2026 · man.freebsd.org
- Stateful firewall
- Rules using keep-state, record-state, limit, or set-limit can create dynamic rules for stateful behavior.Read 11 Oct 2026 · man.freebsd.org
- Traffic shaping
- The dnctl pipe, queue, and sched commands configure traffic shaping and packet scheduling.Read 11 Oct 2026 · man.freebsd.org
Plans and prices
IPFW Free FreeBSD firewall utility; no paid plans stated Read 11 Oct 2026 · man.freebsd.org
Where Specifiction places it
- Server Virtualization Software#8 of 227.8
- Firewall Software#48 of 807.8