Firewalls, monitoring, and when internet access becomes mandatory

Netfilter hooks, tables, and operator-grade change discipline

Linux 2.2, chain logic, and migrating off ipfwadm habits

Edge policy on modest hardware before dedicated appliances