hi, there! I have a suggestion to build GENERIC and ipfw.ko with IPDIVERT by default or change IPDIVERT to NOIPDIVERT and build boot kernels with NOIPDIVERT. The main goal is to allow to use NAT with stock kernels and ipfw.ko. Comments? /fjoe