[pilif]

NAT gives the same amount of security as dropping all SYN packets at the firewall level. The latter just requires much fewer resources to do as it allows for completely stateless operation.

[openasocket]

> NAT gives the same amount of security as dropping all SYN packets at the firewall level

What about UDP packets?