Updated -current recently which left my internal network unusable. The system was forwarding packets but not doing NAT. Turns out the problem was that the external interface, which is a dhcp assigned (via the ISP) interface was no longer being assigned to the egress group. And my NAT rule is:
============================================ match out on egress inet from !(egress:network) to any nat-to (egress:0) ============================================ Which has worked for a very long time. It still works if a manually assign the interface to the egress group, but it was always automatic previously and there's no change in the docs to indicate this still shouldn't be the case. Chris