openbsd系统的防火墙程序－pf

[FAQ Index] [Next: Getting Started]

Table of Contents

• Basic Configuration
  • Getting Started
  • Lists and Macros
  • Tables
  • Packet Filtering
  • Network Address Translation
  • Traffic Redirection (Port Forwarding)
  • Shortcuts For Creating Rulesets
• Advanced Configuration
  • Runtime Options
  • Anchors
  • Address Pools and Load Balancing
  • Packet Tagging (Policy Filtering)
• Additional Topics
  • Logging
  • Performance
  • Issues with FTP
  • Authpf: User Shell for Authenticating Gateways
  • Firewall Redundancy with CARP and pfsync
• Example Rulesets
  • Building an OpenBSD Router

---

Packet Filter (from here on referred to as PF) is OpenBSD's system for filtering TCP/IP traffic and doing Network Address Translation. PF is also capable of normalizing and conditioning TCP/IP traffic, as well as providing bandwidth control and packet prioritization. PF has been a part of the GENERIC kernel since OpenBSD 3.0.

PF was originally developed by Daniel Hartmeier and is now maintained and developed by the entire OpenBSD team.

This set of documents is intended as a general introduction to the PF system as used in OpenBSD. Even if it covers all of PF's major features, it is only intended to be used as a supplement to the man pages, not as a replacement for them.

For a complete and in-depth view of what PF can do, please start by reading the pf(4) man page.

As with the rest of the FAQ, this set of documents is focused on users of the most current release of OpenBSD. As PF is always growing and developing, there are changes and enhancements between the -release version and the version in OpenBSD -current. There are also differences between the current version and earlier versions. The reader is advised to see the man pages for the version of OpenBSD they are currently working with.

[up to FAQ] [Next: Getting Started]

from http://www.openbsd.org/faq/pf/