What Is a Firewall

A firewall is a security guard for network traffic: it sits between a device or network and the outside, inspects the data trying to cross, and allows or blocks it according to a set of rules — it is the gatekeeper the router and operating-system topics both referred to, deciding which connections are permitted and which are turned away. The need follows directly from the how-the-internet-works topic: once a device is reachable over a network, anything on that network can try to connect to it, including attackers constantly probing for a way in. A firewall's job is to make sure only wanted traffic gets through. It works by checking each attempt against rules based on things like where the traffic is coming from, where it is going, and which service it is trying to reach, then taking one of two actions — allow or block. The most important default rule in a typical home setup is simple and protective: permit connections that someone inside started (you asked a website for a page, so its reply is allowed back in), but block connections that originate from the outside uninvited (a stranger on the internet trying to reach into your network is refused). This is exactly the behavior the router topic described as the built-in home firewall, and it is why your devices can freely browse out while remaining hidden from unsolicited contact. Firewalls come in two broad forms that work together. A network firewall protects a whole network at its boundary — the one inside your home router guards every device behind it at once. A host firewall (also called a software firewall) runs on an individual device, like the one built into the operating system from the OS topic, and protects just that machine, which matters especially on untrusted networks like the public Wi-Fi the wifi and staying-safe-online topics warned about, where you cannot rely on someone else's firewall. It is worth being clear about what a firewall does and does not do, to avoid a false sense of safety. It controls which connections are allowed, which stops large classes of attack at the door, but it is not antivirus and not a cure-all: it generally cannot tell that traffic you deliberately allowed is carrying something malicious, so if you are tricked into downloading and running malware yourself, as the computer-virus topic described, the firewall may let it through because you initiated it. That is why a firewall is one layer among the several habits the staying-safe-online topic set out, not a replacement for them. The simple takeaway is that a firewall is a rule-based gate for network traffic: it lets wanted connections through and blocks unwanted ones, it runs both at your network's edge and on individual devices, and it is a strong first line of defense that works best as one part of a layered approach rather than a single wall that makes everything else unnecessary.