100% agree. A simple stateful firewall is more simple than a NAT box, and all else being equal, is likely less exploitable/buggy. Some will argue about what t

100% agree. A simple stateful firewall is more simple than a NAT box, and all else being equal, is likely less exploitable/buggy. Some will argue about what the exact firewall rules should be, but we can have that argument after we all agree to replace NAT with sateful firewalls.