NAT, the new way


the new state table doesn't have these limits any more
we can rewrite both src and dst at the same time

so welcome the nat-to and rdr-to actions
on match or pass rules

can NAT multiple times

NAT applied immediately, rewriting on the fly
at least, we make it look so
real rewrite done late for performance