What PF Doesn't Do There are a few things that PF doesn't do People often ask about these, but we're keeping this code out of the kernel for good reasons. Application layer filtering User-level access control