Add iptables forwarding rules

This is a rebase of #2124 for the 0.7-staging branch.

By default, Fedora has a REJECT rule as the last entry in its iptables FORWARD table, which causes DNS packets sent from a container to be rejected, and all DNS lookups will fail.

Enable container networking for Fedora and any other distros that have this issue.