TCP transactions.
  Initiating client sends a syn packet to remote server*.
  Server responds with ack/syn reply packet.
  Client responds with a ack.

  Client and server have now established a virtual connection and can
    transmit back and forth.

  Firewalls are capable of using this to establish who is initializing 
    the connection and then either allow or reject packets.