The configuration of internal and external packet filter and a single home bastion host provide very good security. 内部和外部包过滤器和一台单向定位的bastion主机的配置提供很好的安全性。
Inside of the firewall the only permit destination for traffic from the interior or exterior route is the bastion host. 在防火墙内部，对于来自内外部路由器的通信量来说，唯一允许到达的目的地是bastion主机。
