---
name: "ipacct"
section: "4freebsd"
platform: "linux"
package: "freebsd-manpages"
version: "12.2-2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/ipaccounting/4freebsd"
---

# ipacct(4freebsd)

IP packet filter and traffic accounting

Part of [ipaccounting(4freebsd)](/ipaccounting/4freebsd.md).

## NAME

**ipfw** – IP packet filter and traffic accounting

## SYNOPSIS

To compile the driver into the kernel, place the following option in the kernel configuration file:

**options IPFIREWALL**

Other related kernel options which may also be useful are:

**options IPFIREWALL\_DEFAULT\_TO\_ACCEPT** **options IPFIREWALL\_VERBOSE** **options IPFIREWALL\_VERBOSE\_LIMIT=100**

To load the driver as a module at boot time, add the following line into the [loader.conf(5)](/loader.conf/5.md) file:

```
ipfw_load="YES"
```

## DESCRIPTION

The **ipfw** system facility allows filtering, redirecting, and other operations on IP packets travelling through network interfaces.

The default behavior of **ipfw** is to block all incoming and outgoing traffic. This behavior can be modified, to allow all traffic through the **ipfw** firewall by default, by enabling the IPFIREWALL\_DEFAULT\_TO\_ACCEPT kernel option. This option may be useful when configuring **ipfw** for the first time. If the default **ipfw** behavior is to allow everything, it is easier to cope with firewall-tuning mistakes which may accidentally block all traffic.

To enable logging of packets passing through **ipfw**, enable the IPFIREWALL\_VERBOSE kernel option. The IPFIREWALL\_VERBOSE\_LIMIT option will prevent [syslogd(8)](/syslogd/8.md) from flooding system logs or causing local Denial of Service. This option may be set to the number of packets which will be logged on a per-entry basis before the entry is rate-limited.

The user interface for **ipfw** is implemented by the [ipfw(8)](/ipfw/8.md) utility, so please refer to the [ipfw(8)](/ipfw/8.md) manpage for a complete description of the **ipfw** capabilities and how to use it.

## SEE ALSO

[setsockopt(2)](/setsockopt/2.md), [divert(4)](/divert/4.md), [ip(4)](/ip/4.md), [ipfw(8)](/ipfw/8.md), [sysctl(8)](/sysctl/8.md), [syslogd(8)](/syslogd/8.md), [pfil(9)](/pfil/9.md)