Did you know…  ipfw/natd appears to be broken in DragonFly 2.6?  Using pf is a better choice, at least, but I found it out the hard way.