IPFilter

    ipfilter controls what packets are allowed in/out

    allows full firewall functionality in kernel

    see man ipf and /usr/share/ipf for many examples