ACL - Access Control Lists
Artists (http traffic) may go in and out of gate (port) 80
Travellers with no papers may not enter at gate 80
Your guard (ACL) can stop traffic based on it's Source or Destination or depending on the type of payload it is carrying or a combination