#2 Insert FORWARD rules before others for more strict firewalls

[Yani Ioannou]

This patch inserts a corresponding rule to the nat
table PREROUTING rule into the filter table FORWARD
chain, before the other rule in that chain allowing the
daemon to work with firewalls such as Shorewall.

[Yani Ioannou]

The patch file