ip-filter不但具有SNAT、DNAT、端口映射、透明代理等已经成熟的功能，同时还实现了IPv4和IPv6协议以及IPSec安全协议的支持。此外还有诸如规则分组、blackhole、数据包捕获等特色-ip-filter not only had SNAT, DNAT, the port mapping, the
transparent proxy and so on already the mature function, meanwhile has
realized IPv4 and the IPv6 agreement as well as the IPSec security
agreement support. In addition also has such as the rule grouping,
blackhole, characteristic and so on data packet capture