A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.