As for myself, I dont need no stinkin software firewall for my network.
My network runs like this
ISP to my Trinux box, Trinux does not use a hard drive, it boots off a floppy
Id like to see hackers get through that.
Then from my Trunix to Dlinks new DFW-660W, that is a an actuall firewall box (I work for D-Link so im testing out this box for a few weeks, its not out yet)
From the 660W to my Cisco uBR900 router (Im also testing this product out)
From there to my Cisco Catalyst 2900 switch, then to my network, :P I love having connections...
So there you have it, I would like to see a hacker get through that
Then again.... they could, if they REALLY wanted to... Ohh yeah, and my serves shut themselves down if they ever get flooded also.
As for the NAT, the nat is just a boxs ability to pass information from a internal networks ip to an externals ip. So like you can see everyone on your network with a for example 10.0.0.1 and still be able to get to get outside to say yahoo.com and have them see your ISPs number. So its not really a firewall, it just makes it harder for someone to see the correct IP that you are coming from. On top of that, the Nat Boxs allow everyone in the world to use its own internal IP scheem. Also with our nice NAT boxs we can use the magical powers of subnetting
