>NAT (and no NAT is not a fucking security feature and is orthogonal to fucking firewalls..)

is this about the meaning of the term "NAT"? because of course it is a security feature if something is offline by default

A box that enforces that doesn't have to do NAT. In fact it's simpler and less error-prone if it doesn't.

I will be over there soon.