The idea that NAT is in any way related to security needs so badly to die. You don't need NAT for a firewall or access control. NAT is a hack to stretch IPv4 an

The idea that NAT is in any way related to security needs so badly to die. You don't need NAT for a firewall or access control. NAT is a hack to stretch IPv4 and that's it. Nearly all security intrusions today are "pulled" in anyway via the web, e-mail, update channels, etc., or are injected by human beings via large scale or targeted phishing. I did netsec for a while and during my tenure all the incidents we had were caused by phishing of one form or another. Once you are inside the network, any tiny bit of defense in depth supplied by NAT becomes irrelevant. Security is so full of mindless cargo cultism...