¨Implemented on routers or firewalls
¨Packet forwarding criteria
–Source IP address
–Destination IP address
–Source TCP/UDP port
–Destination TCP/UDP port
–TCP code bits eg. SYN, ACK
–Protocol eg. UDP, TCP
–Direction eg. Inbound, outbound
–Network interface