* if a packet that creates a NAT is blocked, delete the NAT (logged via
  ipnat as "DESTROY")
* revisit how all of the structure walking is done with ioctls, removing
  the explicit token free'ing in the walking
* change the I* and H* IPv6 macros to use a 32bit pointer to index an array
  rather than a i6addr_t to prevent compilers from using 64bit compares on
  an unsafe boundary
9 files changed