"The utility of the classic firewall is becoming increasingly limited as time marches on. Just because you block the entire Internet except for port 80 -- these days it means you're not blocking anything, since everything is tunneled over HTTP. HTTP is the new TCP."
-- Sourcefire CTO and creator of the open source Snort IPS, Martin Roesch talking about new firewall technology.