How firewalls filter traffic: permit and deny rules, ports and protocols, implicit deny

A firewall is a device or software that controls which traffic may pass between networks or into and out of a host, based on a security policy. It sits at boundaries, such as between the internal network and the internet, between internal zones or on a computer itself, and inspects each packet or connection against an ordered list of rules.