[mar]

ух ты! даже почти всенародно любимый пункт первый (ipfw) под винды портирован

Проект wipfw представляет собой, похожий по синтаксису с FreeBSD ipfw, интерфейс для управления пакетным фильтром Windows 2000/XP/2003. Из функциональности отсутствует возможность ограничения трафика, форвадинга и некоторые другие специфичные функции появившиеся в последнее время.

(http://www.opennet.ru/opennews/art.shtml?num=4914)

What is WIPFW? WIPFW is a MS Windows operable version of well-known IPFW for FreeBSD OS. You can use the same functionality and configure it as only you work with IPFW. Wipfw is a packet filtering and accounting system which resides in the kernelmode, and has a user-land control utility, wipfw.exe. Together, they allow you to define and query the rules used by the kernel in its routing decisions. There are two related parts to wipfw. The firewall section performs packet filtering. There is also an IP accounting section which tracks usage of the router, based on rules similar to those used in the firewall section. This allows the administrator to monitor how much traffic the router is getting from a certain machine, or how much WWW traffic it is forwarding, for example. As a result of the way that wipfw is designed, you can use wipfw on non-router machines to perform packet filtering on incoming and outgoing connections. This is a special case of the more general use of wipfw, and the same commands and techniques should be used in this situation.

(WIPFW project)