Move per-container forward rules to DOCKER chain

Closes #6034

Docker-DCO-1.1-Signed-off-by: Ian Bishop <ianbishop@pace7.com> (github: porjo)
Can we make this a numbered list instead of bulleted? It's much easier for readers if, when you tell them "n" number of things are coming, you then number the things accordingly.