5d80ae61bf
enabled (ipf -E) before ipnat is used; this detail is automated by the rc scripts, but not by ipnat itself. ipf's author agrees this is a doc bug. Closes PR kern/33409.