Netfilter: Network Address Translation

Full dynamic NAPT; userspace controlled by `ipnatctl' tool.
Normal NAT: masquerading, private->public address mapping.
``Reverse'' NAT: transparent proxying, port forwarding, load-sharing.
Can do translation on locally-generated packets.

Extending NAT...