A computer (or the software that runs on it) that acts as a barrier between a network and the Internet by presenting only a single network address to external sites.