fw: switch default FORWARD policy to 'ACCEPT' if the user disables the firewall