How it works
A firewall controls which network connections may cross a boundary. Rules can use addresses, ports, protocols or application identity. A router firewall protects a network boundary; a host firewall applies to one computer. These layers can work together and may have different rules.
A practical example
A printer might be reachable from trusted home devices while a visitor network cannot connect to it. Allowing the printer’s required traffic is more precise than opening every connection between the two networks. The correct rule depends on the actual printing protocol and network design.
What to check
Identify which device enforces the rule, whether the connection is incoming or outgoing and the application involved. Check the active network profile and record existing settings before a scoped change. If access fails, compare the application, address and port rather than switching the firewall off permanently.
When changing a rule, record the original setting and test the named service. Prefer a specific documented exception over disabling the whole firewall to investigate one connection.
Limits and safe use
An allowed connection can still carry a fraudulent page or harmful download. A firewall does not replace malware protection, software updates or authentication. Broad exceptions and unnecessary exposed services weaken its value. On a managed network, ask the responsible administrator before changing rules or bypassing policy.