>> Have you done an "ipf -E" prior to doing "ipnat -l" and
>
>  Okay, that did the trick!  Perhaps, that should be documented
> somewhere in the CHANGES-1.4.2 files (since this apparently
> wasn't necessary under 1.4.1).

Isn't this the ipfilter=YES flag in rc.conf (triggering the ipf -E in rc)?
That hasn't changed between 1.4.1 and -release I don't think.

CU!  Mike.