NAT, both ways


in japan, ryan, claudio and I decided we have the balls to permit it

manpage documents the cases that don't work and the "natural" direction
so it's not our fault when you screw up ;)

pfctl still prevents NAT on rules with no direction specified
would work, but can't be intended