&gt; ...just that without the <i>need for NAT</i>, perpetuated by ISPs only giving us one IP, I doubt anybody would have any ingress filtering at the border.<p>I disagree. Defaults are a powerful thing. If one&#x27;s router ships with a default REJECT ingress firewall, a non-technical user is not likely to change it.