the infected targetted cannot touch the firewall machine in any way, except as allowed within the is_allowed() function The security guarantee is derived from

the infected targetted cannot touch the firewall machine in any way, except as allowed within the is_allowed() function The security guarantee is derived from the minimal attack surface of this is_allowed() method, but fails to consider the dependency on libpcap!