Remove trailing spaces
Fix MASQUERADE should be in POSTROUTING, not PREROUTING
Fix sysctl configuration
Use standard tags
Change FORWARD to ACCEPT by default when iptables_ip_forward == true