Comment by webkike

Or the packets might be thrown out entirely, only letting you use a certain set of port, ip ranges and protocols