Post #1183499

Even with a public-facing IP on every device, ports are still protected by the router's firewall. @Baa thanks for this comment! Instinctively I always knew this, because NAT is not a security tool, the firewall is. Just because NAT and firewall are often coupled does not mean they have to be. It's such a simple explanation I can't believe it took me this long to actually get it!