Comment by cyclotron3k

Yes, but if it's behind a NAT gateway, how is it going to get the initial infection? I know there are ways, but realistically none of them make sense in this context.