Box 2: Stateful packet inspection

IPCop is a stateful packet inspection firewall—this means that all outgoing traffic from the Green network to the Red network is tracked. Only incoming traffic in response to outgoing requests is allowed inside. All other traffic from the Red network to Green (without a corresponding outgoing request) is logged and dropped.