More small fixes

rc.firewall

@@ -325,6 +325,7 @@ if [ $NAT ]; then
 	fi
 	#=================
     # This section is going away in 1.0
+	if [ "$NATRANGE" ]; then
 		for i in $NATRANGE; do
 			$IPTABLES -A POSTROUTING -t nat -s $i -o $NATEXTIF -j SNAT --to-source $NATEXTIP
 		done
@@ -334,6 +335,7 @@ if [ $NAT ]; then
 		$IPTABLES -A OUTPUT -p icmp --icmp-type fragmentation-needed \
 				-o $NATEXTIF -j ACCEPT
 	#=================
+	fi
 fi
 
 $IPTABLES --policy INPUT ACCEPT