An internet firewall sits at the connection point between a private internal network and the public internet. It filters all incoming and outgoing network traffic and only allows authorized traffic according to the network's security policy. There are two main types - host-based firewalls protect individual computers, while network-based firewalls protect entire networks by being placed between the network and internet. Firewalls aim to prevent unauthorized access, only allow approved traffic, and be resistant to penetration.