Remove FORWARD rules from main ferm.conf config

Now forwarding for NATted network is configured entirely by the 'nat'
role. Instead of allowing connections through the outside interface, we
allow connections from inside (NATted interface). That way we should
avoid problems with changing outgoing interface (for example a laptop
that moves from wireless to wired network).