works very well as a firewall