The Hardware Firewall in the Router is based on secured NAT (Network Address Translation). NAT is the Routing agent that decides which computer on you LAN will get the info that it ask for from the Internet. The NAT set in a way that info can get in if requested by one of your computers otherwise the port is closed.
However if you computer initiate the communication the Router can not stop it, and it will open the corresponded port for an answer.
This process makes the NAT Firewall very effective.
The Firewall protection can be loosened by deliberately putting a Computer on the DMZ, or by opening ports.
Some of the new Routers have Firewall based on NAT, and an additional "Stateful Packet Inspection" (SPI) capacity.
SPI let you filter incoming, and outgoing information by rules. The resultant is better control of the info coming and going. E.g. parents can block exchanges that they deem unfit for their children.
You can check your system's security by logging to the following page, scroll down, and click on
Shields Up.
Gibson Default Page.
Gibson Default Page.