NAT fixes

- jail create bug fixed, correct environmental variable set

- Make use of in kernel NAT. Only start ipfw if it hasn't been started
  yet. Manually insert ipfw nat rules for every interface used.

- Only set IP forwarding if it's currently not set to forward. Remove
  the need to run the natd daemon.