What is PF? The standard BSD Packet filter Started in 2001 after the removal of ipf from OpenBSD. Design goals: Free software Secure, robust packet filtering Correct, readable code Flexible but simple to use Good performance Now about 37,000 lines of code