The main responsibility of a firewall is to block access in more complex manner than that provided by ACLs.

• 防火墙的主要职责是提供一种比ACL更为复杂的访问阻塞方式。强烈建议设立防火墙来确保更深一层的保护和对恶意代码的过滤。