fixes firewall rule generation. forwarding rules were inserted in input chains, fixes...