hi, there! I would like to add IPDIVERT option to GENERIC kernels on all platforms and to CFLAGS for ipfw module. This will allow using natd out of box. I'll commit this change by the end of this week if there will be no objections. Regards, /fjoe