NAT routers have been compromised on occasions and I would not consider
this my best or last line of defense.
Yes, those were the ones that were left at the default subnet, the
default logon password and that had UPnP enabled - all of those are
serious threats to any network.
In all the years I've been doing this, with all the people I know using a
NAT Router instead of a firewall appliance, without anything else, even
before Windows XP Firewall, they were secure and able to remain so.
The issue is knowing the difference between a network compromise and a
self-inflicted OS/App compromise. All of the personal firewalls in the
world won't protect you from doing stupid things and compromising your
system - but the NAT router won't allow unsolicited remote connections to
your PC.
--
Leythos
Igitur qui desiderat pacem, praeparet bellum.
Calling an illegal alien an "undocumented worker" is like calling
a drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)