[Firehol-support] How different interfaces are from routers

[Wojtek Swiatek]

Le mar. 31 juil. 2018 à 14:19, Wojtek Swiatek <w at swtk.info> a écrit :

>
> A service (say, a web server) is bound to an interface. Its security is
> dependent on
> - the capacity of a packet to reach that interface (so "router"?)
> - the capacity of a packet to be accepted on the interface (so
> "interface"?)
>
>
For that precise example I would say that  "interface" is not useful as the
traffic can be filtered via "router".
The more I think about it, the less I can imagine a use for "interface"
since the traffic getting to it must in any case come from somewhere =
another interface = filtered via "router"