Future of pf / firewall in FreeBSD ? - does it have one ?

[Darren Reed]

On 24/07/2014 1:42 AM, Cy Schubert wrote:
>>>
>>> But, lack of ipv6 fragment processing still causes ongoing pain.  That'=
>>> s our=20
>>> #1 wish list item for the cluster.
> Taking this discussion slightly sideways but touching on this thread a 
> little, each of our packet filters will need nat66 support too. Pf doesn't 
> support it for sure. I've been told that ipfw may and I suspect ipfilter 
> doesn't as it was on Darren's todo list from 2009.

ipfiler 5 handles fragments for ipv6.

Darren