> Keith, I don't get this argument. A NAPT is a firewall by your own > definition "I believe the primary purpose of firewalls should be to > protect the network, not the hosts, from abusive or unauthorized > usage." It's implementing a very simple policy, protect me from the > outside world. NAT has problematically constrained policy capabilities. Melinda