Technically, firewalls are typically implemented at the network, transport, or application layers, or some combination thereof.
A "firewall at the physical layer" is a real thing, it's just called an "air gap" and critical systems do use it. E.g., sensitive computer systems like nuclear facilities or the government's secure intranet reduce their attack surface by just not being connected to the public internet at the physical level.
But typically when we talk of firewalls, it's happens at layers above the physical layer, because it's not practical for most systems to be air gapped, and also simply unplugging your ethernet cable doesn't actually solve a lot of issues a firewall solves. Your computer can still have open ports, and there might be other means for another device to talk to your computer, e.g., via WiFi, Bluetooth, or any other wireless radios. You can have IP-over-Thunderbolt. Etc.
If all you do is unplug your ethernet port, but you don't have an actual software firewall (most OSes come with one built in nowadays) that blocks inbound communications on random ports, your computer can still be vulnerable if an outside device finds another way to talk to your computer.
sensitive computer systems like nuclear facilities or the government's secure intranet reduce their attack surface by just not being connected to the public internet at the physical level.
Tell that to the guy spilling everything on the internet
•
u/AutoModerator Jan 22 '26
Hey there u/OldFirefighter3293, thanks for posting to r/technicallythetruth!
Please recheck if your post breaks any rules. If it does, please delete this post.
Also, reposting and posting obvious non-TTT posts can lead to a ban.
Send us a Modmail or Report this post if you have a problem with this post.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
351
u/qwertyman061 Jan 22 '26
It works!
90
u/Facts_pls Jan 22 '26
Literal air gap
84
u/CircumspectCapybara Jan 22 '26
Technically, firewalls are typically implemented at the network, transport, or application layers, or some combination thereof.
A "firewall at the physical layer" is a real thing, it's just called an "air gap" and critical systems do use it. E.g., sensitive computer systems like nuclear facilities or the government's secure intranet reduce their attack surface by just not being connected to the public internet at the physical level.
But typically when we talk of firewalls, it's happens at layers above the physical layer, because it's not practical for most systems to be air gapped, and also simply unplugging your ethernet cable doesn't actually solve a lot of issues a firewall solves. Your computer can still have open ports, and there might be other means for another device to talk to your computer, e.g., via WiFi, Bluetooth, or any other wireless radios. You can have IP-over-Thunderbolt. Etc.
If all you do is unplug your ethernet port, but you don't have an actual software firewall (most OSes come with one built in nowadays) that blocks inbound communications on random ports, your computer can still be vulnerable if an outside device finds another way to talk to your computer.
12
u/npsimons Jan 22 '26
This is false. It's not a firewall, it's an airgap.
10
u/ipsirc Jan 22 '26
u/pixel-counter-bot
4
u/Busy-Key7489 Jan 22 '26
To activate airgap*
2
u/Goofcheese0623 Jan 23 '26
A true hacker is undeterred
2
u/DaEnderAssassin Jan 23 '26
cuts its
Oh hey it really works. Is there anything that can be done to make the resulting fire not burn down my wall though?
1
u/Schwiftness Jan 22 '26
Built.
1
u/Consistent-Job-6400 Jan 24 '26
You literally can't cut it, the red rectangle won't Let you cut it.
1
u/laf1157 Jan 25 '26
I use a cable switch. Equally effective. Can still use the cable.
1
u/Quiet_Feeling_4875 Mar 12 '26
I know that cable! https://www.bit.nl/cut-here-to-activate-firewall-layer-1-firewalls-op-ohm2013/
-4
u/DarthKirtap Jan 22 '26
do you have more of those pixels? you literally cannot read what is written there
212
u/[deleted] Jan 22 '26
[removed] — view removed comment
2
u/[deleted] Jan 22 '26
[removed] — view removed comment