E. <bellyup@the.bar> wrote:
> An end user can configure a nat router correctly

Unfortunately, you're not right in this point for most routers I saw.

They're needing extra filtering configuration, and most of them don't
support this in the default configuration, so the user has to configure
and to know, what she/he is doing. :-/

Yours,
VB.
--
MAC-Filtering bringt so viel Schutz vor "Hackern" wie Zeitungspapier vor
einer Atombome. (MAC filtering is protecting against "hackers" like newsprint
is protecting against a nuclear bomb)
- Christian Forler in de.comp.security.misc