This instructs the firewall to reject any traffic except the trusted hosts you have specified and makes you invulnerable to certain types of network attack, such as ARP-spoofing.

• 指示防火墙拒绝任何除了您指定的信任，使你无懈可击某些类型的网络攻击，如ARP，欺骗主机流量。