I'm trying to dial in the ipnat stuff as well (running pretty much the same
configuration as Christopher) and noticed something interesting running the
ipfstat command:

	input packets:	blocked 0 passed 5500 nomatch 1614
	output packets:	blocked 0 passed 1571 nomatch 1397
	....

Is it normal to that high of a "nomatch" count.  Seems to be a possible
reason why tcp connections run soooo slow (maybe 1/10 to 1/20 of a raw cable
modem connection).

I was checking out some previous ipnat email archives and found a few
commands to try, they speed things up a bit, but still nowhere near what the
throughput should be, they are

"/usr/sbin/sysctl -w net.inet.tcp.rfc1323=0"
and
"/sbin/route add 10.0.0.1 localhost -iface"

Anyonbe know how to make those nomatch packets macth?

Thanks
Keith