Thanks first to WatchGuard, and David Bonn, who believed in the netfilter idea enough to support me while I worked on it.
And to everyone else who put up with my ranting as I learnt about the ugliness of NAT, especially those who read my diary.
Rusty.