NAT is NOT a firewall...!

Right. I should have said behind a "NAT/Firewall router".

While I agree that a NAT server, a Firewall, and a Proxy server are technically three different things, you can often find all three or at least two of the three rolled into the same product. All three are ways to protect yourself against just the sort of internet hacks we're talking about in this thread.