A single firewall can freely intermix interface types to meet