What's a Packet Filter? Software that: examines packet headers filters them according to rules decides fate of that packet (eg DROP, ACCEPT)