Re: NAT isn't your first line of defense, the stateful firewall is.
The last thing I want is "advertisements" clogging up my bandwidth and capturing my network. I'm still chasing down modern Apple notebooks that are spamming me with NETBIOS. And DHCP mostly works -- although I've experienced the common problem of ISP DHCP leakage at router restart -- but I have no desire to move any of my servers / utilities to dynamic IP.
And NAT is a stateful firewall. It's a stateful firewall that also does address translation and port randomization. You may argue that NAT 'really does not prevent fires from moving from one part of a building to another", but that's a sophomoric semantic argument.
Biting the hand that feeds IT
