Where IPFW Filters packets Each filter point is a chain of filters Each chain can have zero of more filters Multiple types Normally pushed on like a stack Can be prioritized Can be named