NAT is state tracking with a trick, but not firewalling. It doesn't block connections, so it's not a firewall.