NAT without recompiling my kernel ?

[Wayne Pascoe]

Hi all,

I've got ipfw working and logging without recompiling my kernel. I've
now hit my next problem...

Is it possible to use NAT without recompiling ? I've kldloaded the
dummynet module, and included that in /boot/loader.conf, but when I
reboot, I get the following in my dmesg :

IP packet filtering initialized, divert disabled, rule-based forwarding
enabled, default to deny, logging disabled

Is there any way to set divert enabled without recompiling my kernel
with IPDIVERT included? 

For the record, the relevant section of my rc.conf is as follows:
firewall_enable="YES"
firewall_type="open"
firewall_quiet="NO"
natd_enable="YES"

When I try and add natd by doing
ipfw add 50 divert natd all from any to any via xl0
I get
ipfw: getsockopt(IP_FW_ADD): Invalid argument

and in /var/log/messages I get
Sep 15 20:54:27 marvin /kernel: ip_fw_ctl: invalid command

xl0 is my private network IP by the way

Regards,

-- 
Wayne Pascoe
I laugh in the face of danger... Then I
run and hide until it goes away!