simple question ... what is the concept behind those Guys ?

Ok ... dont go explaining what it does coz we are all aware of that ...
but rather how does it intercept all incoming Connections and outgoing Packets and redirect safe incoming packets to the correct services ..???