Caution: This version of this document is no longer maintained. For the latest documentation, see,

Provide IP filter services

Note: The io-pkt-* manager looks for the correct version of this module when you mount it (i.e. with io-pkt-v4 and io-pkt-v4-hc; with io-pkt-v6-hc.


mount -Ttcpip

Runs on:





The and shared objects are the modules that handle IP filtering and NAT (Network Address Translation) services. You need to load these libraries to enable filtering and NAT functionality.

IP filtering allows your host to act as a firewall, or you can provide firewall services on your host. NAT allows multiple hosts on a subnet to share a common IP address.

You use configuration files to set the filtering and NAT rules. For more details, see the documentation for pf.conf.

See also:

io-pkt-* pf, pf.conf, pfctl

Packet Filtering and Firewalling chapter of the Core Networking User's Guide