Firewalling

Done via the PF Subsystem

New packet filter
implemented after 2.9-release
many authors: Daniel, Mike, Henning, etc
Simple syntax
built on IPF syntax
Big features
'scrub' action
state table
authpf
ftp-proxy
macros