Packet filter with
Filtrering on protocol, port, packet type, address, operating system
Redirection (to other port, local daemon, other machine etc)
NAT
traffic shaping (altq)
Human readable configuration
In the base systems of OpenBSD, FreeBSD, NetBSD and DragonFlyBSD