"Although GNU/Linux has had its own built-in packet filtering technologies (iptables and ipchains) for some time, the ability to use ipfilter on GNU/Linux may interest those who administer a large number of heterogeneous systems and want to standardize on one packet filtering technology. Using ipfilter everywhere certainly would be easier than using iptables on GNU/Linux systems, ipfw on FreeBSD, pf on OpenBSD and ipfilter on Solaris.
"With years of ipfilter experience in both my personal and professional life, I was eager to get my hands on the latest ipfilter code and see exactly what it could do on GNU/Linux. Unfortunately, that was easier said than done..."
