An Internet firewall needs at least three systems
The definition given here is for a firewall with maximal functionality
A packet filter restricts datagrams that arrive from the Internet
A separate packet filter restricts datagrams that leave the organization's intranet
A secure computer system in the firewall runs application SW