Fix the 'nat' option to actually do RFC3581 as expected and extend the configurable...