If anyone out there uses D-Link DI-804HV or DI-808HV VPN routers, you should contact D-Link to receive the latest firmware – v1.41. They don’t list the upgrade on the site for some reason unknown to me, but it is available and does make a difference. NAT from differing WAN->LAN ports never worked with v1.40 – something that drove me absoultely bonkers when setting up NAT rules at our branch offices at work. But now, I can properly redirect any external ports to any internal ones. Thanks, D-Link. Now release the firmware publically. Morons.