Packet Filtering

• Acts like a router or bridge

  • Does not modify network connections or packet headers

• Allow/Deny packets based on packet data

• Allow/Deny packets based on Input/Output interface

  • shorthand for aggregate source or destination