Packet Filtering
In information security, packet filtering is the process by which a firewall allows or blocks
data packets at a network interface according to certain standards such source and destination
addresses, ports, or protocols. By filtering packets according to predetermined rules, this
technique is frequently used to manage the flow of incoming and outgoing network data,
improving network security.
Firewalls that use packet filtering look at each IP packet's header before deciding whether to
accept or block it. These firewalls are frequently installed at network borders, such as those
that separate client networks from server networks or between a corporate network and the
internet. They are the most widely used and basic kind of firewall, while more advanced
models such as next-generation firewalls and deep packet inspection provide more
Packet filtering has the advantages of being easy to use, affordable, quick, and low resource
use. But they have drawbacks as well: they are less resistant to contemporary assaults,
spoofable, unable to make judgments based on authentication or application, and can result in
lengthy rule lists that are difficult to maintain over time.
Sorting packets Firewalls employ rules that administrators establish to decide whether to
accept or reject data packets depending on a variety of factors, including protocol, IP flags,
firewall interface, source and destination IP addresses, ports, and direction (ingress or egress).
These guidelines are essential for building a comprehensive packet filtering policy .
Based on its configuration and operation, packet filtering firewalls are classified into different
categories. The various kinds of packet filtering firewalls are as follows:
i. Static Packet Filters
Administrators manually configure static packet filtering firewalls, which hold
filtering rules that are not updated until they are. Any changes to these firewalls' rules
must be made manually; they do not automatically adapt to changing circumstances.
ii. Dynamic Packet Filters
