14.2 What does a firewall do?
In general a firewall inspects every network packet passing through it and, based on the ’firewall rules’, determine what to do with that packet; drop it, accept it, mark it, pass it to the destination, pass it for further processing, and so on.