This firewall is doing input filtering only. With one exception. It ensures that all packets outbound from the internet interface has the same source ip address as the interface. Sounds stupid but is good practice as it prevents an intruder from using your system as a convenient platform for attacks on other systems.