However,most packet-filters are stateless,understand only low-level protocols,and are difficult to configure and verify.

• 然而，多数包过滤是不分国家的，它们只懂得低级协议，难以配置和验证。