FreeBSD firewalling/NAT question

[Brian J. Conway]

Hey everyone, now that Linux 2.4 actually uses stateful firewalling, as
opposed to ipchains (which was fun, easy to set up, and had some
interesting modules), I'm looking to finally figure out FreeBSD
firewalling efficiently so that I can do it the right way, since there's
really no reason not to at this point.  I know there are a couple of
FreeBSD afficiendos on this list, so I figured it wouldn't hurt to ask. 
I've been going over firewalling and NAT in the handbook.  I'm curious,
what's the difference between the kernel config for IPFIREWALL_FORWARD
and IPDIVERT?  The handbook, rc.firewall, rc.conf, and LINT kernel
config only mention divert in their examples, and there's nothing about
forward at all, which claims to "#enable transparent proxy support." 
Ideas, suggestions, etc.?

Brian J. Conway
dogbert at clue4all.net
Geek for hire: http://clue4all.net/resume

Men may control the free world, but women control the boobs.
(http://www.pvponline.com/archive.php3?archive=20001024)
-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).