> NAT does nothing meaningful securitywise that a firewall cannot achive One good thing about NAT is even if you screw up the firewall config, such as configur

> NAT does nothing meaningful securitywise that a firewall cannot achive One good thing about NAT is even if you screw up the firewall config, such as configure everything in "allow all" mode, your internal network is still secure, because private IPs are not routable at the Internet level. > and causes a lot of stupid problems. That is true.