Change the way we check if ipfw has the rules we want. If the divert rule doesn't exist, restart ipfw and add it. This allows NAT inside the jails.