In this article, we will explore the topic of IPFilter in depth, addressing its importance in today's society and its relevance in various areas. IPFilter has become a topic of growing interest, since its impact extends to different areas of knowledge and daily life. Throughout these pages, we will analyze the main characteristics of IPFilter, as well as its evolution over time and its influence in different contexts. Through a comprehensive approach, we will try to provide a panoramic view of IPFilter, exploring its many facets and its relevance today.
This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these template messages)
|
Developer(s) | Darren Reed |
---|---|
Stable release | 5.1.2
/ 22 July 2012 |
Repository | |
Operating system | FreeBSD, NetBSD, Solaris, illumos, OpenIndiana, Linux, HP-UX |
Type | Packet filtering |
License | Before 4.1.35 and 5.1.1: IPFilter License (BSD-like); Since 4.1.35 and 5.1.1: GNU GPLv2[note 1] |
Website | www |
IPFilter (commonly referred to as ipf) is an open-source software package that provides firewall services and network address translation (NAT) for many Unix-like operating systems. The author and software maintainer is Darren Reed. IPFilter supports both IPv4 and IPv6 protocols, and is a stateful firewall.
IPFilter is delivered with FreeBSD, NetBSD, Solaris 10 through 11.3, illumos, OpenIndiana and HP-UX. It used to be a part of OpenBSD, but it was removed by Theo de Raadt in May 2001 due to problems with its license. It was subsequently replaced in OpenBSD by PF, which was developed by OpenBSD's own developers. DragonFly BSD removed its support for IPFilter in May 2011. Oracle Solaris imported the PF firewall from OpenBSD in the 11.3 release, and removed IPFilter in the 11.4 release.
IPFilter can be installed as a runtime-loadable kernel module or directly incorporated into the operating system kernel, depending on the specifics of each kernel and user preferences. The software's documentation recommends the module approach, if possible.
illumos uses ipfilter for firewalling. Using ipfilter you can create firewalls not just for the host system, but also for zones and hardware virtualized systems.