FWIW, NAT is typically done by the firewalling code, whereas routing is done in separate code.
So "router" is always correct, but "firewall" does not always apply