I have setup some ipfilter rules along with some NAT mappings and they appear
to work fine.  However I am still a little unclear, after reading the
documentation and reviewing the ASCII diagram at
http://coombs.anu.edu.au/~avalon/ipfil-flow.html, as to when exactly the
address translation occurs.

For instance if my internal network is: 192.168.200.0/24 and my external IP
interface is 1.2.3.4 and I map 192.168.200.0/24 -> 1.2.3.4/32.  If I make a
connection from 192.168.200.3 to 5.6.7.8 when does the translation occur,
right after input or just prior to output on the netbsd box?

Thanks,
Wayne