Default configuration of all standard routers does not allow incoming traffic.
Firewalls are broadly of two types - Network Layer and Application Layer.
Application Layer Firewalls (aka Proxy Servers) provide the application control / content security / filtering / etc.…