The script file in base *nix systems that sets up the firewall. This file should contain directives to deny and accept connections on certain ports or from certain net destinations. To be safest, it is suggested that one blocks all ports under 1024 that are not needed. Note, you can block all ports coming in on this range, but allow your computer to connect out on them.