[dlcarrier]

A NAT will drop all packets, until something upstream opens a port. Dropping packets is the default behavior of a NAT.

[radlad]

Nope, it's the default behavior of a typical firewall. NAT rewrites packets but it never drops packets. An un-rewritten packet may fail to route (i.e. "destination unknown".) But that depends on the destination in the packet.