> "Get a firewall" is not a valid response when you have lusers > to drop the latest netgear whatever onto their PC and dial > to some provider somewhere. Your firewall is useless to > protect that segment. In many cases NAT is the ONLY > protection you end up with in this scenario, a scenario that > is far to common in the corporate world.
and do explain how a user coming in with their laptop and dialing a provider is gonna be affected by your nat randy