understanding what firewalls are capable of

correction

No firewall on your network is better than a badly configured firewall

thanks