...which a lot of people haven't, because they falsely believe that NAT by itself is enough to stop all inbound connections to their network.