ipfw3nat: move the implementation back to *.c file