The configuration of internal and external packet filter and a single home bastion host provide very good security. 內(nèi)部和外部包過(guò)濾器和一臺(tái)單向定位的bastion主機(jī)的配置提供很好的安全性。
Inside of the firewall the only permit destination for traffic from the interior or exterior route is the bastion host. 在防火墻內(nèi)部，對(duì)于來(lái)自?xún)?nèi)外部路由器的通信量來(lái)說(shuō)，唯一允許到達(dá)的目的地是bastion主機(jī)。