What is your favourite/best firewall on FreeBSD and why?

[Lucius Rizzo]

I have been looking into articles comparing firewalls that come with
FreeBSD. There isn't much recent info on the net. I am currently using 
FreeBSD 10 with IPFilter.

Firewalls are like MTA servers I find. Each person has their own
proclivities. I happened to have started with IPFilter with Solaris and
throughout Solaris years. Lately, on my Linux servers, I end up running
ufw as lazy man's iptables cli frontend which is easy enough.

Ultimately, outside configuration differences all firewalls are essentially
serve the same purpose but I wonder what is your favorite and why? If
you were to run FreeBSD in production, which of the three would you
choose? IPFilter, PF or IPFW?

Also there is a lack of good interesting rule sets in the BSD realm. With
Linux, there was even a iptables rule set to prevent heartbleed. If you use any
of the firewalls, and have interesting or even optimized rule sets, I
would really like to see them :)

Regards,

-- 

|     _o    _ |_)o_ _  _  
|_|_|(_||_|_> | \|/_/_(_) - Lucius.Tel
--------------------------------------


+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
CAUTION: Unless the word absquatulation has been used in its correct context
somewhere other than in this warning, it does not have any legal or grammatical
use and may be ignored. No animals were harmed in the transmission of this
email, although the kelpie next door is living on borrowed time, let me tell
you. Those of you with an overwhelming fear of the unknown will be gratified to
learn that there is no hidden message revealed by reading this warning
backwards, so just ignore that Alert Notice from Microsoft.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++