What a firewall actually does when it processes a packet, the difference between stateless and stateful inspection, and how policy order matters.