Packet filter with
Filtrering on protocol, port, packet type, address, operating system
Redirection (to other port, local daemon, other machine etc)
NAT
Load balancing/traffic shaping (altq)
Human readable configuration
In the base systems of OpenBSD, FreeBSD, NetBSD and DragonFlyBSD