Article:
  IPFilter on OpenBSD
Subject:   Good quote out of Oreilly "Building Internet firwalls" book
Date:   2001-08-23 02:35:44
From:   midnite
In regards to the first comment above about "true" firewalls I think this quote applies well "If it's supposed to keep the bad guys out of your network, it's a firewall. If it succeeds in keeping the bad guys out, while still letting you happily use your network, it's a good firewall; if it doesn't it's a bad firewall. Thats all there is to it."