f5bf22c2   
   From: barmar@alum.mit.edu   
      
   In article   
   ,   
    David Schwartz  wrote:   
      
   > Perhaps you are under the mistaken impression that NAT is some kind of   
   > firewall all by itself. The goal of NAT is to make things *work* not   
   > to make things not work. If a NAT device can pass the ping, it will   
   > and should, unless configured not to.   
      
   It should only pass packets that match NAT table entries, which are   
   created when you send outgoing packets.  So it should only pass ping   
   replies in response to ping requests to that IP.   
      
   --   
   Barry Margolin, barmar@alum.mit.edu   
   Arlington, MA   
   *** PLEASE don't copy me on replies, I'll read them in the group ***   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)