Conventionally, a firewall configuration is specified as a sequence of rules. Each rule in a firewall configuration is of the form predicate > decision The predicate of a rule is a boolean expression over some packet fields together with the physical network interface on which a packet arrives.