RE: https://infosec.exchange/@catsalad/116121891226554812

NAT is a security boundary. Fight me.

@darfplatypus no it's not!

Cuz a #NAT without #Firewall is like an Airport with Train Station and Bus Hub allowing everyone to go everywhere...

@kkarhan NAT is a state table, firewall is a state table. anything else is just pedantic

@darfplatypus not entirely…

Both are independent from each other: You can have NAT w/o firewalling and firewalling w/o NAT or both together.

And yes, I had enough public IPs in the past that I could forego NAT and just Firewall.

@kkarhan and yet, NAT wont let in a SYN, firewall wont let in a SYN, functionally, same shit.