This is a great a book, not only for designing Internet Firewalls but for personal firewalls too. Includes a very readable TCP/IP Fundamentals appendix and a chapter on Packet Filtering of TCP and UDP. A very nice book for understand how a FW. It does not cover implementation details but covers very well the first step: understand the problem.
