Comment Comment by gertrunde No.... Absolutely no...NAT is absolutely not in any way a substitute for an actual firewall, despite the side effect of 'blocking' ports.And how is "You have to think about which ports you want the NAT gateway to forward." any different from thinking about firewall rules?And most consumer CPE devices (i.e. 'router' etc) are perfectly capable of running a firewall, and often do.And any firewall that doesn't drop inbound traffic by default is not really much use at all.And lastly, if you want you can still do NAT66 if you really must, or IPv6 network prefix translation, which is a slightly improved version. parent gertrunde 3 years ago
NAT is absolutely not in any way a substitute for an actual firewall, despite the side effect of 'blocking' ports.
And how is "You have to think about which ports you want the NAT gateway to forward." any different from thinking about firewall rules?
And most consumer CPE devices (i.e. 'router' etc) are perfectly capable of running a firewall, and often do.
And any firewall that doesn't drop inbound traffic by default is not really much use at all.
And lastly, if you want you can still do NAT66 if you really must, or IPv6 network prefix translation, which is a slightly improved version.