added support for the use_forward firewall config option