All your traffic routes through the cell to their gateway. The gateway has session info and can pass/block traffic