Netfilter: NAT issues

Routing on same network: ICMP redirects.
Mapping to/from broadcast/multicast/loopback addresses.
Matching based on interfaces.

ipchains and ipfwadm...