Packet filter with
Filtrering on protocol, port, packet type, address, operating system
Redirection (to daemon, machine)
NAT
Load balancing/traffic shaping (altq)
Human readable configuration
In the base systems of OpenBSD, FreeBSD, NetBSD and DragonFlyBSD