Introduction to Firewalls: From ISO/OSI to DMZ (December 2006)
This writing presents firewall generic architecture. It also projects how the rule parsing works, and how those rules are managed. Readers will get to know how to choose the best firewall solution for their situation.

http://hakin9.org/magazine/375-knock-knock-knocking-on-firewalls-door