#482 proxies must use ipnat_t separately

[Darren]

Some of the proxies allocate a data structure that contains an ipnat_t. this makes it impossible to properly manage NAT rules used by proxies. All ipnat_t's must be allocated separately.