> Even a correctly-configured NAT will let connections in from outside, and a lot of people don't understand this.
Yes, that's called port forwarding and it is normal thing. You actually want that.
Yes, that's called port forwarding and it is normal thing. You actually want that.
NAT doesn't apply to inbound connections if you don't have a matching port forward rule, so it kind of doesn't matter how NAT works here. This is pure routing, not NAT.