On 3/14/07, Alexandre Biancalana <biancalana at gmail.com> wrote: > On 3/14/07, Wojciech Puchar <wojtek at tensor.gdynia.pl> wrote: > > yes. but ipfw is most universal having all needed things at one place. > > firewalling, routing, shaping, etc. > > PF too. is all at same place. And pf has nat built-in, so it runs in kernel space.