2004: OpenBSD 3.5, May 1st ryan implemented source tracking limit connections per source-IP sticky-address for redirections cedric did interface abstraction, 1st gen refer to nonexistant interfaces think hot-plug, they can show up later interface groups by driver em0, em1 etc in group em ryan did the rdr to localhost protection