Hybrid Restriction

Packet filters can also be programmed to restrict access based on combinations of IP address and Internet service restrictions.

For example, a packet created by the Telnet service can be permitted to pass if it is from another trusted network, while Telnet packets from anywhere else are dropped.

At the same time, the packet filter firewall can be told to pass e-mail packets from anywhere on the Internet without exception.