Packet filter with
Filtrering on protocol, port, packet type, address, operating system ...
Redirection (to other port, local daemon, other machine etc)
NAT
traffic shaping (altq)
Human readable configuration
In the base systems of OpenBSD, FreeBSD, NetBSD and DragonFlyBSD