not sure if this is the right place to ask this

was told to disable nat firewall, for internet / port security on a local computer? would seem counterintuitive? also to disable the port forwarding is good? just want to protect the ports from malicious actors, or someone trying to get in a computer etc, thanks