In article <20050917063721.GA7627@sunny>,
	Water NB <netbsd78@126.com> writes:
> NetBSD has ipf

NetBSD 3.0_BETA and newer also include PF. You comment out
"pseudo-device ipfilter" and enable "pseudo-device pf".

> Which is better and more powerful?

PF:
- stable IPv6 support
- much more powerful configuration language
- support for proxy applications in userland
- traffic normalization
etc.

	Kind regards

-- 
Matthias Scheler                                  http://scheler.de/~matthias/