Internet Connection Firewall
Internet Connection Firewall (ICF) protects
Packet filtering
- Outbound traffic recorded in flow table
- Inbound packets permitted only if match entry in flow table
Port mapping
- Some applications require unsolicited inbound traffic
- Web servers
- On-line games
- LDAP
- Users may explicitly open a port to unsolicited packets