Editing PF (firewall) (section)

== Features ==
The filtering syntax is similar to IPFilter, with some modifications to make it clearer. [[Network address translation]] (NAT) and [[quality of service]] (QoS) have been integrated into PF. Features such as [[pfsync]] and [[Common Address Redundancy Protocol|CARP]] for [[failover]] and redundancy, authpf for session authentication, and ftp-proxy to ease firewalling the difficult [[File Transfer Protocol|FTP]] protocol, have also extended PF.
Also PF supports SMP ([[Symmetric multiprocessing]]) & STO ([[Stateful Tracking Options]]).

One of the many innovative features is PF's logging. PF's logging is configurable per rule within the pf.conf and logs are provided from PF by a pseudo-network interface called ''pflog'', which is the only way to lift data from kernel-level mode for user-level programs. Logs may be monitored using standard utilities such as [[tcpdump]], which in [[OpenBSD]] has been extended especially for the purpose, or saved to disk in the [[tcpdump]]/[[pcap]] binary format using the ''pflogd'' daemon.