Right, but if you’re messing around as a naive learner it’s easy to accidentally disable that or completely open up an IP or range due to a bad rule. It’s a lot harder to accidentally enable port forwarding on a NAT.

▲

degamad 2 days ago | parent [-]

> It’s a lot harder to accidentally enable port forwarding on a NAT.

It's probably less than three clicks on most home router web UIs.

	▲	MisterTea 2 days ago \| parent \| next [-]
		But you have to specify not only the exposed port but also the destination address and port which is not easy to do accidentally. edit: typo
	▲	iamnothere 2 days ago \| parent \| prev [-]
		Very hard to make all those clicks accidentally. But anyway I’m talking about pf/iptables rules, not web UIs.