Most firewalls allow connections from the trusted LAN (Green) out to the internet. This can be configured or blocked within IPCop (on CLI w/ IPTABLES) and there are addons to help as well. Check out BOT http://blockouttraffic.de/ As I always say one cannot look at a firewall as a panacea but as part of a set of security tool, techniques and processes.Â

Thanks,

J