by providing the firewall 210 in this stand alone configuration, any and all access from the public network 202 to the internal network 214 must go through the firewall 210.
A user operating a host machine 200 who attempts to access the internal network 214 via the public network 202 must go through the firewall 210.