IP Filter is a TCP/IP packet filter suitable for use in a firewall environment. To use, it can either be run as a loadable kernel module (recommended) or incorporated into your kernel. Scripts are provided to install and patch system files as required. IP Filter also supports transparent proxying via packet forwarding, including round-robin forwarding to achieve load-balanced proxy.
Release Notes: This release makes substantial changes to the FTP proxy to improve reliability, security, and functionality. It doesn't send ICMP errors/TCP RSTs in response to blocked proxy packets and fixes memory leaks that could occur when unloading ipfilter from the kernel.
No changes have been submitted for this release.
Release Notes: Fixes to parsing and printing of NAT rules with regression tests, new code to adjust TCP checksums inside ICMP errors where present and as required for NAT, fixes for documentation problems in install documents, and fixes for locking problems with auth codes on Solaris.
Release Notes: Patches to install IPFilter into OpenBSD 3.0 (for both kernel compiles and complete system builds), a fix for a bug in automatic flushing of state table which would cause it to hang in an infinite loop introduced in 3.4.20, and more.
Release Notes: This release includes many bugfixes and a few enhancements, especially for IPv6 and the Solaris and BSD code.