NAT is not a firewall, it's a hack to keep ipv4 working today.