destroy for ipf_nat_pending was missing. also break out switch on nat_dir to all the values rather than just _INBOUND/_OUTBOUND, making it more obvious what is going on
1 file changed