Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

IPFW

Free#36 of 76 in Firewall SoftwareServer Virtualization Software

IPFW: FreeBSD's free, deeply configurable firewall for administrators comfortable with command-line rules. Ranked #36 of 76 in Firewall Software by our editors (5.6/10); pricing: Free plan; best for freeBSD administrators needing packet filtering.

5.6/10Editor score
IPFW5.6 Visit FreeBSD

At a glance

  • Editor score
    5.6 / 10
  • Pricing
    Free plan
  • Best for
    FreeBSD administrators needing packet filtering
  • Free plan
    Yes
  • Paid from
    Free
  • Outbound control
    Advanced
  • Facts checked
    22 Sep 2026
IPFW screenshot
  • Where it wins

    • Stateful IPv4 and IPv6 filtering with inbound and outbound rules
    • NAT, logging, traffic shaping, lookup tables, and rule sets
    • Matches traffic by user, group, or jail as well as network conditions
  • Where it doesn't

    • Limited to FreeBSD systems
    • Operated through the command-line ipfw utility
    • No verified integrations or central management layer

Our verdict on IPFW

IPFW is a free, open-source firewall included with FreeBSD. It is designed for administrators managing FreeBSD servers, gateways, appliances, and embedded systems through the command-line ipfw utility. Its core function is ordered packet filtering for IPv4 and IPv6, with rules that can allow, deny, count, log, redirect, or otherwise process traffic. Inbound and outbound matching, stateful rules, and user, group, or jail-based matching give it a strong fit for low-level network control on FreeBSD.

Its feature depth extends beyond basic filtering. IPFW supports network address translation, packet logging through syslog, ipfw0, or routing sockets, lookup tables, and rule sets. Traffic shaping and packet scheduling are handled through dummynet, while forwarding and bridging support broaden its role across gateways and network appliances. Administrators can build ordered rules for both directions of traffic and use stateful behavior to track connections. This makes IPFW suited to environments where precise policy control matters more than a graphical workflow or a broad software ecosystem.

The main trade-off is scope and operating model. IPFW is a FreeBSD system component rather than a separately hosted commercial product, and its platform focus keeps it closely tied to FreeBSD deployments. Command-line administration also favors network operators who are comfortable designing, ordering, logging, and maintaining firewall rules directly. Choose IPFW when FreeBSD compatibility, open-source access, stateful filtering, NAT, shaping, and detailed matching are priorities. Choose an alternative when you need cross-platform coverage, verified integrations, or centralized management across multiple firewall platforms.

Your product? Our editors can test IPFW in depth and publish a review, labelled as paid · from $149/mo →

IPFW pricing

Plans Free planFree Free to use — no paid tier required for the core job.
See plans on man.freebsd.org

IPFW fact sheet

Free planYes
Paid fromFree
Outbound controlAdvanced
Rule directionBoth
Connection alertsYes
Application rulesNot verified
Supported platformsFreeBSD
Central managementNot verified
DeploymentSelf-hosted
SupportCommunity, Docs
Built forSmall business, Mid-market, Enterprise (editorial estimate)
PricingFree plan
Websiteman.freebsd.org
Facts checked22 Sep 2026

Alternatives to IPFW

See all IPFW alternatives →

Also Ranked In

IPFW is ranked in 2 of our directories.

Used IPFW? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used IPFW for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — IPFW 5.6/10

IPFW is listed in our Firewall Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/ipfw/"><img src="https://www.itechguides.com/best/badge/ipfw.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update