NAT/DIVERT Issues in 5.2.1 Release

[Denis Lemire]

I've just completed a frustrating day of attempting to get nat working
on 5.2.1 RELEASE. I've very familiar with using FreeBSD as a nat
enabled Internet gateway, I have set this up on many machines with
prior versions.

I've compiled my kernel with the ip divert and firewall options
needed. I have enabled the firewall and natd in my rc.conf, and have
(for now) set firewall type to open and gateway_enable="yes".

The setup simply won't work, the appropriate rules are in the
firewall, and the natd daemon is running. The main thing I find that
doesn't make sense is running "ipfw -a l" lists the divert rule but
its values are zeroed out such that it has been used.

Is there an issue with nat on 5.2.1-RELEASE? I've even tried compiling
a kernel from cvsup (5.2.1-RELEASE-p9 I believe).

Any suggestions on where I might have messed this up would be excellent.