"Get a firewall" is not a valid response when you have lusers

to drop the latest netgear whatever onto their PC and dial

to some provider somewhere.  Your firewall is useless to

protect that segment.  In many cases NAT is the ONLY

protection you end up with in this scenario, a scenario that

is far to common in the corporate world.

 

Jerry 

 

 

 

Get a firewall.  You shouldn't rely on NAT to provide this

functionality.  How long has IPv6 been on the horizon, promising to

make NAT unnecessary?

 

>I want my inside addresses to be

>non accessible from the 'real world', ever.