For some reason, it seems like ipnat is broken under 1.4.2_ALPHA
(yesterday's and today's anoncvs sources, same checkouts for kernel and
userland).  An "ipnat -l" gives me:

  List of active MAP/Redirect filters:
  kmemcpy:read: Bad address
  kmemcpy: Bad address


  Trying to add a NAT rule even drops me into the debugger with a page
fault from the corresponding ioctl() ...

  Since ipnat works nicely under -current, I presume that this was
caused by some (incomplete, perhaps) pullup after the latest ipf
changes.  AFAICT, ipf is not affected (I haven't done massive testing
here, though), just ipnat.

  Ideas, anyone?

  Cheers
      ,
   Rene