HOME

TheInfoList



OR:

ipfirewall or ipfw is a
FreeBSD FreeBSD is a free-software Unix-like operating system descended from the Berkeley Software Distribution (BSD). The first version was released in 1993 developed from 386BSD, one of the first fully functional and free Unix clones on affordable ...
IP, stateful firewall, packet filter and traffic accounting facility. Its ruleset logic is similar to many other packet filters except IPFilter. ipfw is authored and maintained by FreeBSD volunteer staff members. Its syntax enables use of sophisticated filtering capabilities and thus enables users to satisfy advanced requirements. It can either be used as a loadable kernel module or incorporated into the kernel; use as a loadable kernel module where possible is highly recommended. ipfw was the built-in firewall of
Mac OS X macOS, previously OS X and originally Mac OS X, is a Unix, Unix-based operating system developed and marketed by Apple Inc., Apple since 2001. It is the current operating system for Apple's Mac (computer), Mac computers. With ...
until Mac OS X 10.7 Lion in 2011 when it was replaced with the OpenBSD project's PF. Like FreeBSD, ipfw is
open source Open source is source code that is made freely available for possible modification and redistribution. Products include permission to use and view the source code, design documents, or content of the product. The open source model is a decentrali ...
. It is used in many FreeBSD-based firewall products, including
m0n0wall m0n0wall was an embedded firewall (networking), firewall distribution of FreeBSD, one of the Berkeley Software Distribution, BSD operating system descendants. It provided a small image which could be put on flash memory, Compact Flash cards as w ...
and FreeNAS. A port of an early version of ipfw was used since
Linux Linux ( ) is a family of open source Unix-like operating systems based on the Linux kernel, an kernel (operating system), operating system kernel first released on September 17, 1991, by Linus Torvalds. Linux is typically package manager, pac ...
1.1 as the first implementation of firewall available for Linux, until it was replaced by
ipchains Linux IP Firewalling Chains, normally called ipchains, is free software to control the packet filter or firewall capabilities in the 2.2 series of Linux kernels. It superseded ipfirewall (managed by ipfwadm command), but was replaced by ipta ...
. A modern
port A port is a maritime facility comprising one or more wharves or loading areas, where ships load and discharge cargo and passengers. Although usually situated on a sea coast or estuary, ports can also be found far inland, such as Hamburg, Manch ...
of ipfw and the ''dummynet'' traffic shaper is available for Linux (including a prebuilt package for
OpenWrt OpenWrt (from ''open wireless router'') is an open-source project for embedded operating systems based on Linux kernel, Linux, primarily used on Embedded system, embedded devices to Router (computing), route network traffic. The main components ...
) and
Microsoft Windows Windows is a Product lining, product line of Proprietary software, proprietary graphical user interface, graphical operating systems developed and marketed by Microsoft. It is grouped into families and subfamilies that cater to particular sec ...
. wipfw is a Windows port of an old (2001) version of ipfw.


Alternative user interfaces for ipfw


See also

* netfilter/ iptables, a Linux-based descendant of
ipchains Linux IP Firewalling Chains, normally called ipchains, is free software to control the packet filter or firewall capabilities in the 2.2 series of Linux kernels. It superseded ipfirewall (managed by ipfwadm command), but was replaced by ipta ...
* NPF, a NetBSD packet filter * PF, another widely deployed BSD firewall solution


References


External links


ipfw section
of the FreeBSD Handbook.
The dummynet project
- including versions for Linux, OpenWrt and Windows
wipfw
Windows port of an old (2001) version of ipfw {{FreeBSD Firewall software BSD software