Every person who cares about their privacy, should run a real firewall (NAT is not a firewall, DNS/hosts is not a firewall either) to control everything what go

Every person who cares about their privacy, should run a real firewall (NAT is not a firewall, DNS/hosts is not a firewall either) to control everything what goes in and out of their home network. Unfortunately packet filtering is considerably obscure and most of the people (including most of the programmers and other techies who don't specialize in network administration) are afraid of approaching it.