I often hear some netadmin say that theirs is behind firewall. What exactly does “behind firewall” mean?