I'm looking at a multihomed firewall with (at least) two external NICs, running simultaneous NAT to two separate networks behind it. When I last looked at Linux for a similar solution, five or six ...

As far as I am aware, there is no way to do this. I'm in a similar situation on my Cisco 1711 router. Every time my WAN IP address changes, I need to update all my ip nat statements.