OpenBSD's packet filter, pf, is 12 years old now and a mature, very capable packet filter performing well. We'll glance over its history, abilities and design, plus take a look at future developments.