firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.