I've compiled a custom 1.5.2 kernel, with 
pseudo-device   bpfilter        8               # Berkeley packet filter
pseudo-device   ipfilter                        # IP filter (firewall) and NAT

# Networking options
options         GATEWAY         # IP packet forwarding
options         INET            # Internet protocols
options         IPSEC           # IP security
options         IPSEC_ESP       # IP security (encryption part; define w/IPSEC)
options         PPP_FILTER      # Active filter support for PPP (requires bpf)
options         IPFILTER_LOG    # ipmon(8) log support

and it's booting okay.

however, I need to use ipat/ipf, and when I try to run them, I get:

dexter# ipnat -l
/dev/ipnat: open: No such file or directory

dexter# ipf -V
ipf: IP Filter: v3.4.9 (272)
open device: No such file or directory

is there a problem with ipnat on the cobalt port, or am I missing something?

dmesg:
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 1.5.2 (DEXTER) #0: Fri Feb  1 12:49:48 GMT 2002
    root@dexter.labs.netnoteinc.com:/usr/src/sys/arch/cobalt/compile/DEXTER
65536 KB memory, 58612 KB free, 3376 KB in 844 buffers
mainbus0 (root)
com0 at mainbus0 addr 0x1c800000 level 3: st16650a, working fifo
com0: console
cpu0 at mainbus0: QED RM5200 CPU (0x28a0) Rev. 10.0 with built-in FPU Rev. 10.0
cpu0: L1 cache: 32KB/32B instruction, 32KB/32B data, two way set associative
cpu0: No L2 cache
gt0 at mainbus0 addr 0x14000000
pci0 at gt0
pci0: i/o space, memory space enabled, rd/line, wr/inv ok
pchb0 at pci0 dev 0 function 0: Galileo GT-64111 System Controller, rev 1
tlp0 at pci0 dev 7 function 0: DECchip 21143 Ethernet, pass 4.1
tlp0: interrupting at level 1
tlp0: Ethernet address 00:10:e0:00:1e:1e
lxtphy0 at tlp0 phy 1: LXT970 10/100 media interface, rev. 3
lxtphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pcib0 at pci0 dev 9 function 0
pcib0: VIA Technologies VT82C586 (Apollo VP) PCI-ISA Bridge, rev 39
pciide0 at pci0 dev 9 function 1: VIA Technologies VT82C586 (Apollo VP) ATA33 controller
pciide0: bus-master DMA support present
pciide0: primary channel configured to compatibility mode
wd0 at pciide0 channel 0 drive 0: <QUANTUM FIREBALL EL10.2A>
wd0: drive supports 16-sector pio transfers, lba addressing
wd0: 9787 MB, 16383 cyl, 16 head, 63 sec, 512 bytes/sect x 20044080 sectors
wd0: 32-bit data port
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2
pciide0: primary channel interrupting at irq 14
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 (using DMA data transfers)
pciide0: secondary channel configured to compatibility mode
pciide0: disabling secondary channel (no drives)
VIA Technologies VT83C572 USB Controller (USB serial bus, revision 0x02) at pci0 dev 9 function 2 not configured
rtk0 at pci0 dev 10 function 0: RealTek 8139 10/100BaseTX
rtk0: interrupting at irq 9
rtk0: Ethernet address 00:02:96:03:bf:69
ukphy0 at rtk0 phy 7: Generic IEEE 802.3u media interface
ukphy0: OUI 0x000000, model 0x0000, rev. 0
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
tlp1 at pci0 dev 12 function 0: DECchip 21143 Ethernet, pass 4.1
tlp1: interrupting at level 2
tlp1: Ethernet address 00:10:e0:00:1e:2a
lxtphy1 at tlp1 phy 1: LXT970 10/100 media interface, rev. 3
lxtphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
IPsec: Initialized Security Association Processing.
boot device: wd0
root on wd0a dumps on wd0b
root file system type: ffs


Regards,
L.
-- 
     dBP   dBBBBb | If you're looking at me to be an accountant
              dBP | Then you will look but you will never see
   dBP    dBBBK'  | If you're looking at me to start having babies
  dBP    dB' db   | Then you can wish because I'm not here to fool around
 dBBBBP dBBBBP'   | Belle & Sebastian (Family Tree)