The configuration of internal and external packet filter and a single home <em>bastion</em> host provide very good security.
内部和外部包过滤器和一台单向定位的bastion主机的配置提供很好的安全性。
Inside of the firewall the only permit destination for traffic from the interior or exterior route is the <em>bastion</em> host.
在防火墙内部,对于来自内外部路由器的通信量来说,唯一允许到达的目的地是bastion主机。